If you thought grep was powerful, wait until you get a hold of ast-grep, which takes it to a whole new level.
GitHub used as C2, new Cloudflare exfiltration domain found, linked to April 22 Checkmarx KICS compromise via Dependabot.