On Sat, 2026-10-10 at 00:19 +0000, Emiliano Gandini Outeda wrote: > https://thehackernews.com/2026/10/credential-stealing-github-actions.html
I don't know if benkong-9cat is a cybersecurity researcher, and I also don't know who was the first to notice the attack: https://github.com/ixnewton/org.kde.plasma.quicklaunch/issues/1#issuecomment-6077980859 The AUR attacks, which were allegedly uncovered by cybersecurity researchers, were "uncovered" by them only after the Arch Community had already done so.
