GitHub repos bombarded by info-stealing commits masked as Dependabotbleepingcomputer.com25 pointsrc003 years ago