5 ms·GitHub repos bombarded by info-stealing commits masked as Dependabot25 points by rc00 3y agoChrisArchitect 3y agoMore discussion over here: https://news.ycombinator.com/item?id=37680443 https://news.ycombinator.com/item?id=37680443