“Water Curse”: The New Supply‑Chain Poisoning Nightmare for Cybersecurity Pros

You trust GitHub. Not blindly, but enough—especially as a cybersecurity professional who relies on open‑source pen‑testing tools. You’ve starred and cloned your favourite repos, bookmarked them for audits and assessments, and even shared them with colleagues. But now there’s a chilling new threat: “Water Curse.” A supply‑chain poisoning attack hidden inside repos you thought were…