Security Alert: “Hackerbot-Claw” Autonomous Campaign Exploits GitHub Actions

Hackerbot-claw is an active, automated campaign that systematically exploits misconfigured GitHub Actions workflows in public repositories to inject code, exfiltrate GITHUB_TOKEN credentials, and enable unauthorized pushes or supply-chain compromise; the report details exploitation techniques, cites real compromises (e.g., project-akri/akri), and recommends hardening CI/CD workflows, least-privilege tokens, authorization checks, code review protections, and pinning third-party actions.