We're working on an antiworm. One of our customers got affected.

Our tool already discovers infected repositories and mitigates/removes the implants from the filesystem.

Please revoke/rotate all your tokens and passwords that were used in the infected repositories, the worm is pretty sophisticated.

https://github.com/Team-Rockstars-Security/antimiasma