2026-05-25 · 2026-Q2
"Megalodon" Mass GitHub Actions Secret Exfiltration
Outside the model: Adjacent ecosystem Agent tooling was not the attack surface, so no layer applies.
- Fixable:
- Yes, vendor patch
- Vendor response:
- Unknown
- In the wild:
- Yes
Target
5,561 distinct public GitHub repositories hit by 5,718 malicious commits, surfaced through trojanized Tiledesk npm versions
Impact
Injected GitHub Actions workflows harvested CI environment variables, AWS, GCP, and Azure credentials, SSH keys, Docker and Kubernetes configs, and GitLab and GitHub tokens, deployed across a six-hour window on May 18, 2026
Root Cause
Malicious CI workflows injected across thousands of repositories; the same npm account that shipped clean Tiledesk versions unknowingly published poisoned ones after its GitHub repository was compromised. Researched by SafeDep with additional analysis from OX Security