Gheist Campaign Steals Cloud Secrets via Compromised GitHub Tokens

An ongoing supply chain attack, dubbed 'Gheist', is using compromised GitHub tokens to harvest credentials and sensitive data from thousands of developer repositories. The attack targets cloud secrets, indicating a deliberate focus on cloud infrastructure. The full scope and attribution remain unclear, but the scale suggests a significant threat to software supply chains.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works