Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel, the attacker pushed a malicious workflow to 27 repositories starting at 13:20 UTC," StepSecurity

Researchers reported that compromised GitHub maintainer accounts were used to add credential-stealing GitHub Actions workflows to more than 340 repositories, with the workflows exfiltrating repository secrets and cloud, AI, and SaaS credentials to attacker-controlled infrastructure over plain HTTP. The incident is directly relevant to AI supply-chain security because exposed AI credentials and tampered automation workflows can compromise downstream development and deployment environments. RealGround analysis: organizations should inventory workflow dependencies and secrets, assess repository and CI/CD trust boundaries, and continuously test for malicious workflow insertion and credential exfiltration.