•SiTech AI Team
GhostAction Campaign Plants Credential-Stealing GitHub Actions Workflows in Tens of Thousands of Repositories
Cybersecurity researchers have disclosed an ongoing credential-theft campaign attributed to GhostAction that compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories.
