Credential-Stealing GitHub Actions Workflows Compromise 340+ Repositories
RedSide Security October 10, 2026 Cybersecurity 7 views
Attackers compromised maintainer accounts to inject credential-stealing GitHub Actions workflows into over 340 repositories, including the popular pyxel game engine.
Open Source Security
CI/CD Security
Credential Theft
GitHub Actions
Supply Chain Attack
StepSecurity
pyxel
Continue reading: Credential-Stealing GitHub Actions Workflows Compr…