Thousands of GitHub Projects Compromised in 'wfx-loot' Cyberattack, Cloud Service Access Keys Stolen

A large-scale cyberattack, dubbed 'wfx-loot', has compromised thousands of GitHub repositories, including those linked to major corporations and government bodies. Attackers used 4,837 compromised accounts to send fraudulent pull requests, leading to the execution of malicious code in at least 1,835 repositories and the theft of corporate passwords, API keys, and access to cloud services. The campaign began on November 10, 2026.