Water Curse hijacked 76 GitHub repos to spread stealthy, multi-stage malware.Posing as dev tools, it steals credentials, hijacks sessions, and persists undetected—active since March 2023.

CheckDot is SAFU .