The "Gheist" Campaign: A Massive Wave of GitHub Automations Weaponized for Credential Theft

In a sophisticated and highly automated offensive operation, a threat actor has successfully infiltrated the software supply chain by compromising over 850 GitHub accounts and injecting malicious workflows into more…