Attributed metadata history
Up to 100 retained publisher events per page for cb14fec751f3f0fcc1bb8bd925d2c24aa856d8cd324a86cd42b7a021e6de403d. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_636032c91a0b4c9a97
observed · 2026-10-12 10:37:03 UTC
available
Fingerprint: cc58046b4b1d7fb963844e45a69d2195cff987918478e05287925b56bc65734d
intelligence_src_636032c91a0b4c9a97
observed · 2026-10-12 10:37:03 UTC
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel, the attacker pushed a malicious workflow to 27 repositories starting at 13:20 UTC," StepSecurity
Fingerprint: 202d01ff603a56bad476c93f993b00879d2a305dcbd89e59615d37915ea2148b