Four Credential-Harvesting Campaigns Hit Open Source Ecosystems in Two Weeks GitGuardian Blog