supply-chain
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
Medium
Summary
A sophisticated supply chain attack, dubbed GhostAction, has been targeting GitHub repositories since September 2025, leveraging compromised maintainer accounts to inject a malicious workflow. Researchers advise developers to check their repositories for the malicious workflow and take steps to mitigate the impact.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data