supply-chain
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
Medium
Summary
A campaign called Gheist is using stolen GitHub tokens to plant malicious workflows that print private repository secrets into GitHub Actions logs. The campaign has impacted over 850 accounts, including those of enterprise organizations, and has been linked to earlier supply-chain attacks.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data