The original source appears to be https://checkmarx.com/blog/surprise-when-dependabot-contribu...
Submitters: "Please submit the original source. If a post reports on something found on another site, submit the latter." - https://news.ycombinator.com/newsguidelines.html