
Stolen GitHub tokens plant a CI secret-stealer across thousands of repos
Aikido says at least 1,806 repositories ran a “wfx” payload that stole Actions secrets and cloud keys from November 10.
1
1 stories, newest first · one card per story

Aikido says at least 1,806 repositories ran a “wfx” payload that stole Actions secrets and cloud keys from November 10.
Today 868 readers · 1.1K views · 231 reads · all time 193K views