New GhostAction wave on GitHub targets AI keys, Socket says
Malicious workflows in GitHub repositories search for Anthropic, OpenAI and OpenRouter keys, including in git history, according to Socket.
Source of truthsocket.dev/…/ghostaction-cloud-credenti…According to Socket, on October 8 a workflow named security-audit.yml was added to 346 repositories through two compromised GitHub maintainer accounts. In an update dated October 9, Socket counts more than 500 accounts and tens of thousands of repositories since October 7. The workflow collects credentials and sends them to a hardcoded IP address. Socket says the new variant also sweeps the full git history for 13 credential patterns, including Anthropic, OpenAI and OpenRouter keys. Socket advises rotating every key that ever appeared in a commit and removing the file.
Related stories
Microsoft: Storm-0940 group automated attacks with AI agents
According to Microsoft, Storm-0940, which it assesses as China-state aligned, used the open-source ARTEX framework to automate attacks targeting hundreds of organizations; most of the targeting was not successful.
LiteLLM: malicious version 1.107.0 published to PyPI and Docker
According to LiteLLM, version 1.107.0, pushed on October 21, contained malware that steals credentials. LiteLLM advises anyone who installed it on a host with outbound internet access to assume the data was exfiltrated and to rotate keys and secrets.