Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign

Using thousands of hijacked accounts, the wfx-loot campaign planted a CI secret stealer that ran in over 1,800 GitHub repositories.

Preview courtesy of SecurityWeek. The full article opens on their site.