GhostAction Is Still Running: 1,900 Accounts, 30,000 Repos, and a Year of Stolen Keys

Between October 8 and 9, roughly 1,900 compromised developer accounts pushed the same malicious GitHub Actions workflow file into more than 30,000 repositories. GitHub started blocking the workflows o