Cooldown or compromise: the three-day rule for npm and PyPIhttps://www.reddit.com/r/programming/comments/1x6kh7q/cooldown_or_compromise_the_threeday_rule_for_npm
submitted by /u/actually_NOLAN [link] [comments]
🔍 Search
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositorieshttps://thehackernews.com/2026/10/ghostaction-compromises-about-1900.html
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026. "This resulted from compromising the GitHub accounts of about 1,900 users. It attempted to extract 3,174 secrets from public repositories' CI," security researchers Gaetan