Researcher says GitHub Actions has been actively abused to plant and run cryptominers on GitHub's server infrastructure since November; GitHub is investigating
Code-hosting service GitHub is actively investigating a series of attacks against its cloud infrastructure that allowed cybercriminals …
One of my repo's just got hit with a similar attack. Account in question has a bunch of other open PR's that currently have miners running. https://twitter.com/... https://twitter.com/...
GitHub Actions is being abused to mine cryptocurrency on GitHub servers in an automated attack. Attack requires no action by the targeted project that is forked. Cryptominer executes as soon as the Pull Request is filed. - @Ax_Sharma https://www.bleepingcomputer.com/ ...