Attackers target 61 public GitHub repos in suspected supply-chain campaign
Researchers suspect coordinated campaign to execute commands and steal credentials in CI/CD environments
Threat hunters at Radware have uncovered a suspected coordinated supply chain campaign that targeted 61 public GitHub repositories, including popular open source projects like Google LangExtract, Trivy, Brave browser, and MLflow, in what they suspect is a campaign to execute commands in CI/CD environments and steal credentials and access tokens.