🧰 GitGuardian

The items that name it 8

• New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack
  writeupas tools2026-10-23It is written here as GitGuardian: secret-scanning platform whose API key was among the secrets taken.
• GhostAction Copycats PolinRider by Hiding a Stealer in a Fake Font File
  writeupas tools2026-10-16It is written here as GitGuardian (found only 16 percent of 772 repositories in the August and September wave effectively cleaned by October 5, and 92 cases of edited leftover workflows; as reported by The Hacker News).

  found only 16 percent of 772 repositories in the August and September wave effectively cleaned by October 5, and 92 cases of edited leftover workflows; as reported by The Hacker News

• The OpenSourceMalware Show #25
  talkas tools2026-10-15It is written here as GitGuardian (discovered GhostAction).

  discovered GhostAction

• GhostAction Phishing Campaign
  writeupas classification.key entities2026-10-11
• GhostAction Attack Escalates By Targeting GitHub Users
  writeupas classification.key entities2026-10-09
• New GhostAction Wave Hits Hundreds of Repos, Expanding Beyond CI/CD Secrets to Cloud Credentials
  writeupas tools2026-10-09

  Security firm that originally documented the GhostAction campaign in September 2025 and reported its return in 2026.

• OWASP Free AppSec Tools
  articleas tools2026-05-06

  Commercial tool scanning Git repository history and monitoring new contributions in real-time for secrets; free for open source repos hosted under GitHub Organization

• 973 MCP Packages, 71% Single-Maintainer: A Practitioner
  articleas classification.key entities