Fake automated commits injected GitHub Actions workflows containing payloads to steal credentials, CI secrets, keys, and tokens. More than 5,500 GitHub repositories were infected with malware in a ...