GitHub Attack – branches sending secrets to webhook
6 danieldspx 1 9/15/2025, 6:02:42 PM
A lot of repos are being under attack where branches are being created under the name [REDACTED] to trigger GH actions and send all secrets to a webhook website. This is new and here is an example:
[REDACTED]
Just search on github and you will see planty repos.
Comments (1)
danieldspx · 3h ago
I redacted the names to avoid spreading and teaching people how to get other people's secrets. I am in contact with Github and will update here once they solve the issue.