Check your GitHub repos: A secret stealer hit tens of thousands of them

A threat actor using stolen GitHub credentials has pushed a credential-stealing payload into tens of thousands of repositories since November 10. In more than 1,800 of them, the malware ran and shipped GitHub Actions secrets and cloud credentials to the…

Preview courtesy of Help Net Security. The full article opens on their site.