I have documented the Git Worm malware incident that halted our team for 2 days and infected 100+ repositories.
https://sharonrosario.space/case-studies/git-worm-malware-incident

The case study covers how it got in, how it spread, how it disguised itself, how it worked, and complete recovery steps—including cleaning PCs, VS Code, project configs, rotating secrets, and preventing future infections.

Everything we learned is documented here. Good luck.