# Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories

Source: [The Hacker News](https://thehackernews.com/2026/11/4837-hijacked-github-accounts-ran-ci.html) · 2026-11-12 · Security
Page: https://themorning.dev/story/attacker-used-4-837-hijacked-github-accounts-to-run-a-ci-secret-stealer-in-1-806-417b99b8248b9848

Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret stealer in repositories those accounts could write to, according to Aikido Security, a security software company. The stealer is built to take the secrets and cloud credentials that…

## Coverage

- [Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories](https://thehackernews.com/2026/11/4837-hijacked-github-accounts-ran-ci.html) — The Hacker News, 2026-11-12

---

Brief generated by AI (–) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev