GhostAction returns with wider secret theft
Socket researchers say two GitHub accounts pushed a credential-stealing Actions workflow into tens of thousands of repositories, including Uber's.
2 results for “git history”
Socket researchers say two GitHub accounts pushed a credential-stealing Actions workflow into tens of thousands of repositories, including Uber's.
Apiiro found 1,122 public copies of a Claude Code settings file holding plaintext secrets, with nothing fixed for files already in git history.