The GitHub Black Market That Helps Coders Cheat the Popularity Contest

Hackers are spoofing themselves as GitHub's Dependabot to steal user passwords

GitHub repos bombarded by info-stealing commits masked as Dependabot

GitHub passkeys generally available for passwordless sign-ins