Robuta

https://www.theregister.com/2025/04/07/github_supply_chain_attack/
Apr 7, 2025 - : But this mystery isn't over yet, Unit 42 opines
the massivestolenspotbugstokensgithub