Fake GitHub CI Update Steals Secrets and Tokens

**Executive Summary:** An automated campaign (active March–April 2026) abused GitHub Actions' pull_request_target trigger by submitting hundreds of malicious PRs that injected CI-relevant payloads to exfiltrate GITHUB_TOKEN and other secrets, probe cloud metadata, and publish malicious npm package versions; the attacker adapted through phases from simple scripts to AI‑generated, repository‑aware payloads and successfully compromised at least two npm packages.