GitHub Actions runners
Named by 3 kept items in this workspace.
Search every workspace for GitHub Actions runners. It matches the name as written, so it can find other things that share it.
The items that name it 3
CI environments, including GitHub Actions runners (Linux), targeted by the payload for credential and memory collection.
OIDC token theft in Mini Shai-Hulud wave
All technologies in this workspace.