Thousands of GitHub repos hit with secret-stealing malware
if ( !emtpy($headline_subheadline ) ) : ?> Every repository and organization secret wrapped up in a JSON dump, including credential files from well-known paths, shell histories, and API keys for AI services. Credit: Gil C - shutterstock.com Researchers have uncovered a campaign in which hijacked GitHub accounts spread secret-stealing malware…