GitHub faces widespread malware attacks affecting projects, including crypto

The developer who found the vulnerability requested developers to sign their revisions with the GPG key to ensure all their revisions on the project can be verified.