Unverified50% confidenceFactExact time
According to The Hacker News, Operation GhostAction discovered by GitGuardian affected about 1,900 GitHub accounts and more than 30,000 repositories, with payloads attempting to steal 3,174 secrets from CI environments, including npm, PyPI, DockerHub, and AI vendor credentials.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/19/2026
First Seen
Valid until: 1/17/2027
Sources
Related Entities
Related Claims
UnverifiedIn July 2024, a security company disclosed approximately 7,600 malicious GitHub repositories, of which more than 800 directly impersonated AI plugins, with the total download count of these plugins and tool servers exceeding 14 million.79% similarUnverifiedA team successfully stole nearly 4,000 internal GitHub repositories through a malicious VS Code extension.78% similarUnverifiedResearchers crawled 315,320 reasoning blocks from public repositories on GitHub and Hugging Face, recovering via decryption 367 pieces of personally identifiable information (PII) and 182 credentials (including 62 API keys, 33 passwords, and several private keys).77% similarVerifiedAccording to official GitHub data, over 12 million leaked keys were detected on the platform in 2023.77% similarUnverifiedGitHub Secret Scanning is powerless against keys that have already been leaked to public Gists, Stack Overflow posts, or historical commits73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1067938API
curl https://kongchang.com/api/v1/knowledge/claims/1067938MCP
get_claim(id=1067938)