Thousands of GitHub Projects Compromised in Large-Scale Cyberattack, Cloud Service Access Keys Stolen

A large-scale cyberattack, dubbed "wfx-loot," has compromised tens of thousands of GitHub repositories by using stolen developer credentials to send fraudulent pull requests. Researchers at Aikido Security estimate that malicious code was executed in at least 1,835 cases, leading to the theft of corporate passwords, API keys, and access to cloud services, affecting major corporations and government bodies.