Gheist malware uses stolen GitHub tokens to steal private repository secrets via Actions logs

Gheist malware reportedly uses stolen GitHub tokens to steal private repository secrets via Actions logs, according to a report. The technique exploits GitHub Actions logs to extract secrets from compromised repositories.

Detected & updated continuously · Source: Nebula