United States1 source
Confirmed:Confirmed by the organisation, a regulator or a securities filing. First reported 30 Oct 2026.
The GhostAction campaign placed malicious workflows in 790 GitHub repositories, putting cloud credentials and tokens at risk.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for GitHub Actions
Confidence 55% that this is real and correctly placed. Locations are city centroids at best. Spotted an error? Report a correction.