Shai-Hulud compromised a dev machine and raided GitHub org access: a post-mortem

262 points • nkko • 4 days ago • 182 comments