GitHub repos bombarded by info-stealing commits masked as Dependabot

https://www.bleepingcomputer.com/news/security/github-repos-bombarded-by-info-stealing-commits-masked-as-dependabot/

https://twitter.com/home/status/1707002201296556091

https://twitter.com/home/status/1707019576922567133

https://twitter.com/home/status/1707019889142042776

https://twitter.com/home/status/1707107373918065049

https://twitter.com/home/status/1707118714653389301