Cryptominers flooding GitHub—and other cloudy dev services - TechBeacon

“This is why we can’t have nice things.” Owners of public GitHub projects have been noticing weird stuff recently: Random users are forking repos, then pull-requesting a change that includes an obfuscated GitHub Action.

So there isn’t much an owner can do—other than disable the #GitHubActions feature.

In this week’s #SecurityBlogwatch at @TechBeaconCom, we watch @GitHubSecurity play Whac-A-Mole: https://t.co/6LeTpyvr40

— @Richi 😷 Jennings (@RiCHi) April 8, 2021