Research reports
1,224 reports from 387 publishers45 added in the past week
1 report, newest added first
Added Sat 24 Oct
The GhostAction Campaign: 3,325 Secrets Stolen Through Compromised GitHub Workflows
TL;DR: GitGuardian discovered and investigated the GhostAction campaign, which compromised 327 GitHub users across 817 repositories, stealing 3,325 secrets through malicious workflows disguised as "Github Actions Security." Attackers extracted PyPI, npm,…
Supply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.