Email: [email protected]
A new automated campaign named Gheist is using stolen access tokens to exfiltrate sensitive data from private GitHub repositories by abusing GitHub Actions logs.