Gheist: stolen GitHub tokens plant sync-check workflow to dump secrets, per Wiz
Wiz says the Gheist campaign has planted over 13,500 branches from 850+ compromised accounts; GitHub's hold blocks it in public repos, but not private ones.
audiotale.net team7 min read
