GitHub faces widespread malware attacks affecting projects, including crypto
2 years ago
The developer who found the vulnerability requested developers sign their revisions with the GPG key to ensure all their revisions on the project can be verified.