GitHub Actions being actively abused to mine cryptocurrency on GitHub servers
GitHub Actions is currently being abused by attackers to mine cryptocurrency using GitHub’s servers in an automated attack. GitHub Actions is a CI/CD solution that makes it easy to automate all your software workflows and setup periodic tasks. The particular attack adds malicious GitHub Actions code to repositories forked from legitimate ones, and further creates a Pull Request…