Hackers Turn Nearly 5,000 GitHub Accounts Into Supply Chain Attack Tools

Hackers used thousands of compromised GitHub accounts in the wfx-loot campaign, exposing repositories to malicious workflows and credential theft. Here's what to check.