GitHub Secrets Leak via Gheist Stolen Tokens

A mass campaign, dubbed Gheist, has been using compromised GitHub tokens to plant malicious workflows that dump repository secrets into GitHub Actions logs, then download and delete those logs. The at