#GitHub repos hit by a new supply chain attack - GhostAction attackers compromised maintainer accounts and injected malware into 346 repositories, including #Uber's athenadriver stealing cloud&AI credentials, CI/CD secrets:
#SoftwareSupplyChainSecurity
👇
https://socket.dev/blog/ghostaction-cloud-credentials
Sam Stepanyan :verified: 🐘
npub1gr…9gp67
2026-10-09 14:42:56 UTC
Author Public Key
npub1gr8f0c2al23r8wpv2v7vt2na36g3xnpz06pceqhrysmlg8gahyjqp9gp67Seen on
wss://relay.momostr.pinkPublished at
2026-10-09 14:42:56 UTCEvent JSON
{
"id": "ce8f15c64d3208e89a18d08f815a7467b956384725a5126b4d4391de0bee6d32",
"pubkey": "40ce97e15dfaa233b82c533cc5aa7d8e91134c227e838c82e32437f41d1db924",
"created_at": 1791556976,
"kind": 1,
"tags": [
[
"t",
"uber"
],
[
"t",
"softwaresupplychainsecurity"
],
[
"proxy",
"https://infosec.exchange/@securestep9/117411478011437347",
"web"
],
[
"t",
"github"
],
[
"proxy",
"https://infosec.exchange/users/securestep9/statuses/117411478011437347",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/securestep9/statuses/117411478011437347",
"pink.momostr"
],
[
"-"
]
],
"content": "#GitHub repos hit by a new supply chain attack - GhostAction attackers compromised maintainer accounts and injected malware into 346 repositories, including #Uber's athenadriver stealing cloud\u0026AI credentials, CI/CD secrets:\n\n#SoftwareSupplyChainSecurity\n👇\nhttps://socket.dev/blog/ghostaction-cloud-credentials",
"sig": "8c8a4d8fd6e603c8a72fa8368d4142dc57caa63c2e5bae219e3dc05ec989235b56bb813310f7437921244b76094b04751b1a532a4a1edaf7fb62cf44cb33b2c0"
}