supply-chain
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
A campaign called Gheist is using stolen GitHub tokens to plant malicious workflows that print private repository secrets into GitHub Actions logs. The campaign has impacted over 850 accounts, including those of enterpri…
Medium
