Hackers compromise nearly 4,800 GitHub accounts to steal cloud credentials

A threat campaign dubbed ‘wfx-loot’ leveraged nearly 4,800 compromised GitHub accounts to scan tens of thousands of repositories and push malicious code. The primary objective of the actors was to harvest sensitive cloud credentials and API keys from targeted development projects.