Gheist campaign plants secret-dumping workflows using stolen GitHub tokens
acossta
47 points
0 comments
October 25, 2026
Related Discussions
Found 5 related stories in 133.0ms across 10,559 title embeddings via pgvector HNSW
- Disrupting supply chain attacks on NPM and GitHub Actions nyku · 87 pts · July 29, 2026 · 55% similar
- AI-Generated GitHub Copilot “Autofix” Allowed Compromise of Snowflake's Jira galnagli · 349 pts · August 17, 2026 · 54% similar
- Incident with Github.com kevcampb · 698 pts · August 17, 2026 · 54% similar
- OpenAI agents carried out an undisclosed attack on RubyGems chao- · 551 pts · September 11, 2026 · 52% similar
- Sourcehut account takeover via build logs (XSS in ansi2html) arusekk · 93 pts · September 24, 2026 · 52% similar