Attackers compromised 42 GitHub repositories by using files too large to be searched

Attackers used oversized files and hidden hooks in 42 GitHub repositories to bypass normal search and API-based detection, then leveraged those repos and npm packages to steal credentials, poison CI/CD, and spread across developer and cloud environments. For CIOs and technology leaders, this is a supply-chain warning that modern compromises can trigger when developers merely open a repo in their tools, making repository integrity, identity protection, and CI/CD hardening strategic priorities for IT organizations.