Henry Wu

Socket researchers identified over 500 compromised GitHub accounts spreading a malicious "security-audit.yml" workflow to tens of thousands of repositories in the GhostAction campaign, which on Octobe…