Tag: github token theft

GitHub Token Theft Exposes Private Repository Secrets

A recent security breach campaign, dubbed Gheist, used stolen GitHub tokens to infiltrate over 850 accounts, exposing secrets from private repositories by cleverly hiding its tracks. The attackers created over 13,500 planted branches, printing sensitive data to GitHub Actions logs before erasing evidence.