ConceptGhostAction行动
GhostAction
A supply chain attack campaign disclosed by GitGuardian affecting roughly 1,900 GitHub accounts and more than 30,000 repositories, which used CI environment payloads to attempt to steal thousands of secrets, including npm, PyPI, DockerHub and AI vendor credentials.
Timeline (last 90 days)
Oct 19
According to The Hacker News, Operation GhostAction discovered by GitGuardian affected about 1,900 GitHub accounts and more than 30,000 repositories, with payloads attempting to steal 3,174 secrets from CI environments, including npm, PyPI, DockerHub, and AI vendor credentials.
Unverified50%