CISA alerts organizations to software development pipeline attacks.

CISA has issued an alert regarding recent attacks on software development pipelines, advising security teams to investigate potential compromises. The warning references the "Megalodon" supply chain attack and a GitHub incident involving a malicious VS Code extension. These sophisticated attacks have resulted in the theft of sensitive credentials and API tokens.