Aikido Security

Compromised GitHub accounts pushed a CI secret stealer into tens of thousands of repositories

Aikido Security says 4,837 compromised GitHub accounts opened probe pull requests in 61,764 repositories from 10 November, and that a payload ran in…