Security researchers at GitGuardian have uncovered a sophisticated supply chain attack dubbed "GhostAction" that compromised 327 GitHub users across 817 repositories, successfully stealing 3,325 sensitive developer secrets.
The attack, discovered on September 5, 2025, represents one of the largest documented cases of malicious GitHub...