---
title: "Discussion on \"GhostAction Never Stopped: 1,900 Accounts, 30,000 Repos, and a Year of Stolen Keys\" | Hashnode"
description: "Discussion on \"GhostAction Never Stopped: 1,900 Accounts, 30,000 Repos, and a Year of Stolen Keys\". The GitHub Actions supply chain campaign that never stopped - and why AI API keys made it much more valuable"
url: "https://hashnode.com/posts/ghostaction-github-actions-supply-chain-ai-api-keys-2026/6adc33243c56f5422d5ba5f6"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [GhostAction Never Stopped: 1,900 Accounts, 30,000 Repos, and a Year of Stolen Keys](https://404-founders.com/blog/ghostaction-github-actions-supply-chain-ai-api-keys-2026?utm_source=hashnode&utm_medium=feed)

The GitHub Actions supply chain campaign that never stopped - and why AI API keys made it much more valuable

Oct 20 · 8 min read · 404-founders.com  
Updated Oct 30  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#github](https://hashnode.com/tag/github)
-   [#supply-chain](https://hashnode.com/tag/supply-chain)
-   [#devsecops](https://hashnode.com/tag/devsecops)
-   [#api-security](https://hashnode.com/tag/api-security)

## Written by

[404 Founders](https://hashnode.com/@404-founders)

@404-founders · Bosnia and Herzegovina, Estonia

  
[View profile](https://hashnode.com/@404-founders)

Error-proof Cyber Solutions

Securing the digital frontier. Error-proof cyber solutions.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.