Supply-chain attack using invisible code hits GitHub and other repositories

(arstechnica.com) by Bender | Mar 14, 2026 | 1 comments on HN