GitHub repos bombarded by info-stealing commits masked as Dependabotbleepingcomputer.com25 points·rc00··1 commentOpen articleSaveView on HN