This new supply attack steals your GitHub credentials, and then pushes infected commits as you to repositories.

I love computers.