3 ms·
You're right, it's creating commits but it's not just creating GHAs. It's also directly altering the targetted project's javascript to steal credentials from en
by masfuerte 3y ago
You're right, it's creating commits but it's not just creating GHAs. It's also directly altering the targetted project's javascript to steal credentials from end users using the project. (Edited with correction as below.)
- deathanatos 3y ago> it's not creating GHAs (sic) … the OP includes a screenshot of a malicious GHA workflow that exfils secrets. (In addition to altering the targetted project's JS.)
- masfuerte 3y agoThanks for the correction. I only read the text.