Hackers have used a vulnerability in GitHub and GitLab to upload malware disguised as legitimate repositories through phishing links generated from unpublished comments on open source projects.
View full story…