Attacker Targets 60,000 GitHub Repositories

An attacker tested stolen access to more than 60,000 GitHub repositories and inserted credential-stealing code in thousands of them, several security firms report. Aikido Security said the operation, which it calls wfx-loot, began on November 10. It identified roughly 4,800 compromised accounts behind probe pull requests submitted to 61,764 repositories.