GitHub faces widespread malware attacks affecting projects, including crypto

The developer who found the vulnerability requested developers sign their revisions with the GPG key to ensure all their revisions on the project can be verified.