Evidence · DiggingBeagle record
Aikido: wfx-loot compromises GitHub repositories and CI credential stores
Primary investigation separates probe pull requests, committed malicious workflow and observed execution. Reports 61,764 probes and differing estimates 1,806 versus 1,835 executed workloads; AI API keys were among targeted secret classes.
- Source role
- primary disclosure
Evidence record
Primary investigation separates probe pull requests, committed malicious workflow and observed execution. Reports 61,764 probes and differing estimates 1,806 versus 1,835 executed workloads; AI API keys were among targeted secret classes.