OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors
A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
We haven't written up this one. Dark Reading has the full story — the link below goes straight to it.