Private repos still leak secrets to Gheist, a stolen GitHub token campaign

Wiz Research has recovered more than 13,500 planted branches from 850+ compromised GitHub accounts, the work of a campaign it calls Gheist, after the user agent the tool sends …

First seen on helpnetsecurity.com

Jump to article: www.helpnetsecurity.com/2026/10/27/gheist-github-token-abuse/