## GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories

- 種別: news
- 関連技術: github, actions
- 公開日時: 2026-10-19T13:05:45.000Z
- 情報源: The Hacker News (https://thehackernews.com/2026/10/ghostaction-attackers-plant-credential.html)
- パーマリンク: https://vulnpulse.app/items/thehackernews-bdcf728a9e2a

The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detailed by OpenSourceMalware, signals that the attackers are actively refining their modus operandi in response to steps