# Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour

- URL: https://talkfuse.com/story/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour/
- Published: 2026-10-29T12:00:00+00:00
- Updated: 2026-10-29T12:13:38+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/10/29/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour/5306153
- Topics: Elections, Politics

## Key points

- 83 malicious items targeted 61 public GitHub repositories.
- The posts appeared in a 45-minute window.
- Researchers confirmed execution in two automation environments.

## Summary

Researchers identified a suspected coordinated campaign that used hidden commands in GitHub issues, pull requests and comments to target automation workflows in public repositories. The activity could expose credentials and access tokens, potentially allowing attackers to alter software and spread malicious code through its supply chain.

By 13 October, Radware had verified 83 malicious items across 61 repositories. Seventy-seven were posted in a 43-minute period on 1 September, followed by six more within two minutes; the activity used 74 GitHub accounts, many with legitimate histories. Researchers found evidence that the commands ran in two automation environments, but could not confirm whether repository credentials were stolen or software was changed.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.