#GitHub repos hit by a new supply chain attack - GhostAction attackers compromised maintainer accounts and injected malware into 346 repositories, including #Uber's athenadriver stealing cloud&AI credentials, CI/CD secrets:
#SoftwareSupplyChainSecurity
👇
https://socket.dev/blog/ghostaction-cloud-credentials