Thousands Of GitHub Accounts Hijacked With wfx-loot CI Secret Stealing Malware Via GitHub Actions & npm - OX Security

The wfx-loot malware specifically targets npm packages, which are then used to infiltrate GitHub repositories. Once inside, the malware leverages GitHub Actions to extract sensitive secrets and credentials from compromised accounts.

Security Concerns

Security experts at OX Security identified the attack pattern, highlighting vulnerabilities in the software supply chain. The incident underscores the need for enhanced security measures in developer environments.