Reposted by C_ristina
🚨 A new GhostAction wave has hit hundreds of GitHub repos, including Uber’s athenadriver and Pyxel.
Attackers used compromised maintainer accounts to plant fake “security audit” workflows that steal GitHub Actions secrets.
C_ristina
@cristinah.bsky.social
329 followers 926 following 349 posts
„OHNE H" - she/her - occasional random ranting - @gynformation - DE/ES/EN
