The agency is expanding detection and tracking technology projects while simultaneously loosening the reins on oversight.
Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.