GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.