GitHub issue and PR payloads hit 61 repos including Trivy, Brave and MLflow in a 43-minute workflow injection campaign · updates

GitHub issue and PR payloads hit 61 repos including Trivy, Brave and MLflow in a 43-minute workflow injection campaign: Radware publishes the campaign. Targets include agno-agi/agno, ToolJet, google/langextract, aquasecurity/trivy, CopilotKit, podman, QwenLM/qwen-code, mlflow, discord.js, cilium, brave/brave-browser, dotnet/maui, Homebrew/homebrew-cask, github/docs, apache/doris and PX4-Autopilot. Run logs show the command executed in two cases; Radware can't say whether the attacker got write access or changed any code. Maintainers were notified and most repos were closed or fixed, but not all are confirmed.

Thu, 29 Oct 2026 00:00:00 GMT

Source

GitHub issue and PR payloads hit 61 repos including Trivy, Brave and MLflow in a 43-minute workflow injection campaign: Radware verifies 83 malicious items (59 issues, 24 pull requests; 31 payloads in titles, 17 in bodies, 35 in comments) across 61 repositories from 74 named accounts, many with legitimate histories and likely compromised. 29 issues and 6 PRs were still open at the time.

Tue, 13 Oct 2026 00:00:00 GMT

Source

GitHub issue and PR payloads hit 61 repos including Trivy, Brave and MLflow in a 43-minute workflow injection campaign: Between 11:26:51 and 12:10:00 UTC, 77 issues, pull requests and comments carrying a shell command payload hit public GitHub repositories, followed by a second wave of six about two minutes long later that day. The payloads target workflows that paste issue or PR text straight into shell scripts, so the $() command runs inside GitHub Actions and tries to send the job's environment variables to an attacker-controlled server.

Tue, 01 Sep 2026 00:00:00 GMT

Source