AI Summary

An attacker began on Tuesday using stolen credentials from 4,837 GitHub accounts to deploy a secret‑stealing script into repositories that those accounts could modify. The malware targets continuous‑integration workflows, harvesting secrets and cloud credentials that the CI processes can access. Aikido Security identified the operation and traced the compromised accounts to the attack. The stealer is designed to run within the CI environment, collecting sensitive data from the repositories it infects. The incident highlights the risk of credential reuse and the potential for large‑scale secret theft through compromised GitHub accounts.

AI summaries can be wrong sometimes—always verify important details using the source article.