Socket finds fake GitHub Action steals credentials

Security researchers at Socket have uncovered a supply chain attack affecting tens of thousands of GitHub repositories through malicious automated workflows. The attack uses a fake security audit GitHub Action to steal credentials, API keys, and sensitive data from repository files and Git history. Researchers note the campaign shares characteristics with previous GhostAction attacks. Open article →