Tag: malicious workflow

GitHub Repositories Compromised in Widespread Supply Chain Attack

Tens of thousands of GitHub repositories were hit by a massive supply chain attack, with a sneaky malicious workflow quietly stealing sensitive credentials and sending them to an external server. The culprit was a cleverly disguised GitHub Action that masqueraded as a harmless security tool.