The discovery by Palo Alto Networks' Unit 42 prompted action by owners of popular repositories where secrets were leaked through GitHub Actions artifacts.

GitHub projects have been targeted with malicious commits and pull requests, in an attempt to inject backdoors into these projects. Most recently, the GitHub repository of Exo Labs, an AI and ...