Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign

Source: Security Week

Published Nov 12, 2026 (UTC)

Read original source

At a glance

Using thousands of hijacked accounts, the wfx-loot campaign planted a CI secret stealer that ran in over 1,800 GitHub repositories. The post Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign appeared first on SecurityWeek .