GitHub, NPM registry abused to host SSH key-stealing malware

Malware distribution on open source package repositories increased 1,300% in the last three years, researchers say.

devsecops distribution github host key malware malware distribution npm open source package registry repositories researchers ssh ssh key stealing supply chain