2026年10月19日 9:05 ET 发布 · 更新于 1 个月前 · 1 个来源
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
The Hacker News
·
原始报道
INFERY
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detailed by OpenSourceMalware, signals that the attackers are actively refining their modus operandi in response to steps
原文