A credential-stealing GitHub Actions workflow has been pushed into tens of thousands of repos, targeting AI provider keys (Anthropic, OpenAI, OpenRouter) · Jadid

Skip to content

JadidJust-in AI Developments, Incidents & Deadlines

Sunday, October 11, 2026 · 2 of 5

A credential-stealing GitHub Actions workflow has been pushed into tens of thousands of repos, targeting AI provider keys (Anthropic, OpenAI, OpenRouter)
Oct 9Security

Read the full briefing · 8 stories