account-hijack

Live1

1. live
   GitHub Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories

   Supply chain · Exploited · —No fix needed · since 10 Nov 2026

   An attacker compromised 4,837 GitHub accounts and injected a secret‑stealing tool into the CI pipelines of at least 1,806 repositories. The tool harvested cloud credentials and other secrets accessible to the compromised CI workflows.

   Do:Revoke compromised credentials, rotate all secrets, and audit CI workflows for malicious code

Earlier0

Nothing closed yet.