⚠️ Over 4,800 stolen GitHub accounts used to plant a CI secret stealer that ran in at least 1,806 repositories. The malware targeted #GitHub secrets and cloud credentials. Attackers reverted malicious commits within a minute and usually deleted workflow logs.

‼️ Attackers hijacked over 4,800 #GitHub accounts to plant credential-stealing malware in repositories. The stealer executed in at least 1,806 repos, harvesting CI and cloud credentials while attackers often erased traces of its activity. Seen a wfx-docs bra

Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign

🚨 Hackers hijack 4,837 GitHub accounts and target over 61,000 repositories in massive credential theft campaign Security researchers at @AikidoSecurity have uncovered a large-scale attack in which hackers used stolen GitHub credentials to inject malicious cod