GitHub token abuse campaign Gheist dumps secrets from private repos, where GitHub’s approval hold on malicious workflows doesn’t apply.
Gheist uses stolen GitHub tokens to extract secrets through Actions logs, planting over 13,500 branches across 850 compromised accounts.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results