RVTools hit in supply chain attack to deliver Bumblebee malware

Supply chain attack hits npm package with 45,000 weekly downloads

GitHub Action hack likely led to another in cascading supply chain attack

Supply chain attack on popular GitHub Action exposes CI/CD secrets