'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets

A supply chain attack, referred to as Gheist, is currently underway, targeting developer repositories. The attack is harvesting credentials and sensitive data from thousands of repositories, utilizing compromised GitHub tokens to gain access. This allows the attackers to steal cloud secrets, potentially leading to further exploitation. The attack is ongoing, affecting a large number of repositories. The use of GitHub tokens as a means to gain access highlights the vulnerability of developer credentials in cloud-based development environments. The scope of the attack is significant, with thousands of repositories already compromised.