GhostAction workflows in 790 GitHub repos hunt cloud and AI keys
Original title: Hackers Hijack 790 GitHub Repositories to Steal Cloud Credentials and AI API Keys
OpenSourceMalware's count through October 9 is validated public repos, not proof that every one leaked secrets.
A campaign called GhostAction added malicious GitHub Actions workflows to 790 repositories, according to OpenSourceMalware's review through October 9, 2026. Compromised maintainer accounts were used to add workflows that scan files and full git history for cloud, publishing, and AI service credentials, then send them over plain HTTP. GitGuardian earlier counted 772 repositories from August 31 to September 30; an October 8 burst covered 346 repositories, including Uber's uber/athenadriver. Some workflows ran, but no malicious PyPI or crates.io releases were linked to that burst as of October 9.
Unconfirmed: OpenSourceMalware does not claim every counted repository leaked credentials or that my-github.com was registered by the operator.
- Workflows look for AWS, GitHub, GitLab, Google, Slack, SendGrid, OpenAI, Anthropic, and OpenRouter secrets.
- Collection IP 193.32.204.199 and my-github.com are named; domain registration is unproven.
- Deleting the workflow does not revoke tokens or clear secrets from old commits.
- The PyPI package claudecord 0.3.2 led researchers to the workflows.
- Figures from GitGuardian, OpenSourceMalware, Socket, and StepSecurity cover different periods.
Impact: Exposure of cloud, publishing, and AI API credentials
- 1.Revoke the account credentials used to change workflows and rotate every secret the workflow could access.
- 2.Preserve workflow files, run logs, commits, and audit records before cleanup.
- 3.Check package releases, deployments, and cloud activity from the affected period.
- ATT&CK
- T1078 Valid AccountsT1552.001 Credentials In FilesT1048.003 Exfiltration Over Unencrypted Non-C2 Protocol
- Vendors
- GitHub
- Products
- GitHub ActionsPyPI
- Malware
- GhostActionclaudecord
- Victims
- Uber
- Organizations
- OpenSourceMalwareGitGuardianSocketStepSecurity
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | carte-avantage.com | esk[.]page ; objective-hopper.45-139-104-115.plesk[.]page ; carte-avantage[.]com ; *.oast[.]fun Earlier campaign infrastructure Workflow p |
| domain | crates.io | ws ran successfully, but it had not found malicious PyPI or crates.io releases linked to this latest burst as of October 9. Why r |
| domain | my-github.com | s can add further checks. OpenSourceMalware also identified my-github[.]com , which resolves to the campaign’s current collection IP, |
| domain | my-gitlab.com | ldcard DNS; individual subdomains need corroboration Domain my-gitlab[.]com Watchlist only; not attributed to GhostAction Historical |
| domain | oast.fun | pper.45-139-104-115.plesk[.]page ; carte-avantage[.]com ; *.oast[.]fun Earlier campaign infrastructure Workflow paths .github/wo |
| domain | plesk.page | .39.218[.]2 ; 45.139.104[.]115 ; bold-dhawan.45-139-104-115.plesk[.]page ; objective-hopper.45-139-104-115.plesk[.]page ; carte-av |
| ipv4 | 170.39.218.2 | only; not attributed to GhostAction Historical IPs/domains 170.39.218[.]2 ; 45.139.104[.]115 ; bold-dhawan.45-139-104-115.plesk[.]p |
| ipv4 | 193.32.204.199 | b4d1256f3e8c4b claudecord version 0.3.2 artifact IP address 193.32.204[.]199 Current collection and scanning infrastructure URL http:/ |
| ipv4 | 45.139.104.115 | uted to GhostAction Historical IPs/domains 170.39.218[.]2 ; 45.139.104[.]115 ; bold-dhawan.45-139-104-115.plesk[.]page ; objective-hop |
| sha256 | 7fbd40446a82c77b23432c6ab73bd8595c98e90e4f4a473198b4d1256f3e8c4b | ators of compromise (IoCs):- Type Indicator Context SHA-256 7fbd40446a82c77b23432c6ab73bd8595c98e90e4f4a473198b4d1256f3e8c4b claudecord version 0.3.2 artifact IP address 193.32.204[.]1 |
From the original article
4 min read at cybersecuritynews.com
A campaign called GhostAction has placed malicious GitHub Actions workflows in 790 repositories, putting cloud credentials, software-publishing tokens, and AI service keys at risk. The total is OpenSourceMalware’s count of publicly recoverable, validated repositories through October 9, 2026; it is not a claim that every repository leaked credentials or suffered confirmed misuse. The campaign abuses […]
By Tushar Subhra Dutta · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.