Attackers have leveraged over 4,800 compromised GitHub accounts in a coordinated campaign called "wfx-loot" to steal developer credentials and API tokens at scale. The operation scanned more than 61,000 repositories searching for write permissions, successfully targeting at least 1,835 victims.
The attack method was deceptively simple: hackers submitted pull requests titled "docs: dependency audit notes" that injected a 1,500-line script into GitHub Actions workflows. Once merged, the malicious script executed within the victim's CI/CD pipeline, capturing sensitive data including GitHub tokens, AWS credentials, Azure keys, and Google Cloud authentication details. The attackers also harvested access credentials for AI services including OpenAI, Anthropic, Gemini, Hugging Face, Cursor, and GitHub Copilot.
This campaign highlights how developer tools can become attack vectors when repositories lack proper code review practices. Trusting pull requests from seemingly routine maintenance tasks—especially those affecting CI/CD configuration—creates a window for supply chain compromise.