Hijacked GitHub accounts plant secret-stealing malware in thousands of repos
The script also rewrites AWS role trust and injects Azure federated credentials so access can survive rotation.
78
Product
gocurl
- Mentions · 7d1
- Mentions · 30d1
- All mentions1
- First seenNov 13, 2026
- Last mentioned13h ago
Timeline
1 articles · newest firstAppears with
- GitGuardianorganization · 1
- StepSecurityorganization · 1
- GitHub Actionsproduct · 1
- docker-envproduct · 1
- Fly.iovendor · 1
- wfx-lootmalware · 1
- neuronai-studioproduct · 1
- GitHubvendor · 1
- ArmorCodeorganization · 1
- Aikido Securityorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.