> TritonInfoSec News
Home / Oct 11, 2026 / Story
0
#5 The Hacker News general October 09, 2026 at 19:14 UTC

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

By [email protected] (The Hacker News)

AI Summary

An ongoing campaign compromised at least two prominent open-source maintainer accounts — including that of Takashi Kitao, author of the 18,400-star pyxel game engine — to push malicious GitHub Actions workflows into over 340 repositories starting October 9. The attack targets CI/CD pipelines for credential theft, threatening the software supply chain of thousands of downstream projects.

Read full article → https://thehackernews.com/2026/10/credential-steal…

Relevance score: 86.0/100

# More from October 11

  1. 1
    FBI Arrests Founder of Ransomware Negotiation Firm Krebs on Security
  2. 2
    Germany arrests alleged core Qilin ransomware member after extradition BleepingComputer
  3. 3
    Citrix warns admins to patch new NetScaler RCE flaw immediately BleepingComputer
  4. 4
    Unpatched AhsayCBS Vulnerabilities Exploited in the Wild SecurityWeek
  5. 6
    Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own The Hacker News
  6. 7
    US Disrupts Chinese State-Sponsored Hacking Tools SecurityWeek
  7. 8
    GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys The Hacker News
  8. 9
    Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries SecurityWeek
  9. 10
    Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws The Hacker News