Credential-Stealing GitHub Actions Workflows Planted in Repositories

Security researchers have uncovered an ongoing supply chain campaign leveraging compromised maintainer accounts to inject malicious workflows into hundreds of open-source repositories. These workflows are designed to harvest sensitive credentials and tokens from CI/CD pipelines. Developers are urged to audit their GitHub Actions configurations immediately for unauthorized modifications.