#GitHub Actions

CI Secret Stealer Hits 1,800+ GitHub Repos via Stolen Accounts

An attacker used 4,837 stolen GitHub accounts to plant code that steals CI secrets and cloud credentials; it ran in at least 1,806 repositories.