{
  "id": 17057736,
  "title": "Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour",
  "url": "https://urgent.news/2026/10/29/attackers-turn-github-issues-into-supply-chain-campaign-against-61",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-29T12:00:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/security/2026/10/29/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour/5306153"
  },
  "original_language": "en",
  "account": "Researchers have uncovered a coordinated campaign targeting 61 public GitHub repositories, including notable open source projects like Google LangExtract and Trivy. The attacks, identified by Radware threat hunters, occurred rapidly, with 77 of the malicious items published within a 43-minute timeframe on September 1. The attacker used 74 different GitHub accounts, many of which were likely compromised. The campaign is suspected to be a supply-chain attack, aimed at stealing credentials and accessing repositories to inject malicious commands that could modify code and exfiltrate data. The attackers used HTML comments to hide malicious commands within issue, pull request, or comment posts, triggering automated workflows in vulnerable repositories. Once triggered, the attacker-controlled content was incorporated directly into shell source code, executing the hidden commands that stole environment variables and attempted exfiltration. While the researchers found evidence of the malicious command running in two cases, they couldn't confirm whether the attacker gained repository write permissions or compromised downstream software. The affected repositories span various categories, including AI frameworks, security tools, development infrastructure, databases, and others. The researchers informed the maintainers of the affected projects, but confirmation of all closures or fixes is pending. To mitigate such attacks, the researchers recommend implementing least-privilege access to CI/CD workflows, separating workflows triggered by external events from elevated permission jobs, and treating external content as untrusted.",
  "summary": "'The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully'",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}