Credential Theft

GhostAction Hits 1,900 GitHub Accounts and 30,000 Repositories

GhostAction expanded into a massive GitHub supply chain campaign, compromising about 1,900 accounts and targeting more than 30,000 repositories to steal CI/CD, cloud and API secrets.