Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
More than 500 GitHub accounts committed credential-stealing workflows to tens of thousands of repositories since October 7, Socket says.
More info