The GhostAction GitHub Actions supply-chain campaign, first surfaced in September 2025, has returned at far greater scale: Socket reported on 9 October that more than 500 GitHub accounts have committed the malicious workflow to tens of thousands of repositories since 7 October, after compromised maintainer accounts pushed it to the 18,400-star game engine pyxel's author Takashi Kitao (27 repositories) and henrywoo, author of Uber's athenadriver (318 repositories in a 16-minute window). The injected workflows, masquerading as "Security Audit" (security-audit.yml / github_actions_security.yml), trigger on any push and on workflow_dispatch, checkout the full git history, and exfiltrate repository secrets — AWS keys, Anthropic, OpenAI and OpenRouter API keys, GitHub and GitLab tokens, SSH keys and cloud/SaaS credentials — to a hard-coded IP (193.32.204[.]199) over plain HTTP. GitGuardian counted 772 public repositories hit between 31 August and 30 September, targeting 2,577 secrets; in one case an XMRig miner was embedded in the DevOpsGPT Docker image. No malicious package releases have yet been published. Owners of affected repositories are urged to assume compromise, revoke credentials and delete the workflows from all branches and forks.

• Source article