{"id":7124,"date":"2023-09-27T12:39:41","date_gmt":"2023-09-27T12:39:41","guid":{"rendered":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/"},"modified":"2023-09-27T12:39:41","modified_gmt":"2023-09-27T12:39:41","slug":"stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire","status":"publish","type":"post","link":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/","title":{"rendered":"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire"},"content":{"rendered":"<p>Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions.<\/p>\n<p>The post <a href=\"https:\/\/www.securityweek.com\/stolen-github-credentials-used-to-push-fake-dependabot-commits\/\">Stolen GitHub Credentials Used to Push Fake Dependabot Commits<\/a> appeared first on <a href=\"https:\/\/www.securityweek.com\/\">SecurityWeek<\/a>.<\/p>\n<p><a href=\"https:\/\/www.securityweek.com\/stolen-github-credentials-used-to-push-fake-dependabot-commits\/\" target=\"_blank\" class=\"feedzy-rss-link-icon\" rel=\"noopener\">Read More<\/a>\u00a0<\/p>","protected":false},"excerpt":{"rendered":"<p>Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions. The post Stolen GitHub Credentials Used to Push Fake Dependabot Commits appeared first on SecurityWeek. Read More\u00a0<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-7124","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.8 - aioseo.com -->\n\t<meta name=\"description\" content=\"Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions. The post Stolen GitHub Credentials Used to Push Fake Dependabot Commits appeared first on SecurityWeek. Read More\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.8\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Sekuritas IT \u203a Creative solutions to unique challenges.\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire \u203a Sekuritas IT\" \/>\n\t\t<meta property=\"og:description\" content=\"Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions. The post Stolen GitHub Credentials Used to Push Fake Dependabot Commits appeared first on SecurityWeek. Read More\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-09-27T12:39:41+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-09-27T12:39:41+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/profile.php?id=100086973577423\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire \u203a Sekuritas IT\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions. The post Stolen GitHub Credentials Used to Push Fake Dependabot Commits appeared first on SecurityWeek. Read More\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/2023\\\/09\\\/27\\\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\\\/#blogposting\",\"name\":\"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire \\u203a Sekuritas IT\",\"headline\":\"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire\",\"author\":{\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/author\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/#organization\"},\"datePublished\":\"2023-09-27T12:39:41+00:00\",\"dateModified\":\"2023-09-27T12:39:41+00:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/2023\\\/09\\\/27\\\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/2023\\\/09\\\/27\\\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\\\/#webpage\"},\"articleSection\":\"Uncategorized\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/2023\\\/09\\\/27\\\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sekuritasit.com#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sekuritasit.com\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/category\\\/uncategorized\\\/#listItem\",\"name\":\"Uncategorized\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/category\\\/uncategorized\\\/#listItem\",\"position\":2,\"name\":\"Uncategorized\",\"item\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/category\\\/uncategorized\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/2023\\\/09\\\/27\\\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\\\/#listItem\",\"name\":\"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sekuritasit.com#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/2023\\\/09\\\/27\\\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\\\/#listItem\",\"position\":3,\"name\":\"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/category\\\/uncategorized\\\/#listItem\",\"name\":\"Uncategorized\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/#organization\",\"name\":\"Sekuritas IT\",\"description\":\"Creative solutions to unique challenges.\",\"url\":\"https:\\\/\\\/sekuritasit.com\\\/\",\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/profile.php?id=100086973577423\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/2023\\\/09\\\/27\\\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\\\/#webpage\",\"url\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/2023\\\/09\\\/27\\\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\\\/\",\"name\":\"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire \\u203a Sekuritas IT\",\"description\":\"Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions. The post Stolen GitHub Credentials Used to Push Fake Dependabot Commits appeared first on SecurityWeek. Read More\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/2023\\\/09\\\/27\\\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/author\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/index.php\\\/author\\\/#author\"},\"datePublished\":\"2023-09-27T12:39:41+00:00\",\"dateModified\":\"2023-09-27T12:39:41+00:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/#website\",\"url\":\"https:\\\/\\\/sekuritasit.com\\\/\",\"name\":\"Sekuritas IT\",\"alternateName\":\"Sekuritas\",\"description\":\"Creative solutions to unique challenges.\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/sekuritasit.com\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire \u203a Sekuritas IT","description":"Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions. The post Stolen GitHub Credentials Used to Push Fake Dependabot Commits appeared first on SecurityWeek. Read More","canonical_url":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/#blogposting","name":"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire \u203a Sekuritas IT","headline":"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire","author":{"@id":"https:\/\/sekuritasit.com\/index.php\/author\/#author"},"publisher":{"@id":"https:\/\/sekuritasit.com\/#organization"},"datePublished":"2023-09-27T12:39:41+00:00","dateModified":"2023-09-27T12:39:41+00:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/#webpage"},"isPartOf":{"@id":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/#webpage"},"articleSection":"Uncategorized"},{"@type":"BreadcrumbList","@id":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/sekuritasit.com#listItem","position":1,"name":"Home","item":"https:\/\/sekuritasit.com","nextItem":{"@type":"ListItem","@id":"https:\/\/sekuritasit.com\/index.php\/category\/uncategorized\/#listItem","name":"Uncategorized"}},{"@type":"ListItem","@id":"https:\/\/sekuritasit.com\/index.php\/category\/uncategorized\/#listItem","position":2,"name":"Uncategorized","item":"https:\/\/sekuritasit.com\/index.php\/category\/uncategorized\/","nextItem":{"@type":"ListItem","@id":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/#listItem","name":"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire"},"previousItem":{"@type":"ListItem","@id":"https:\/\/sekuritasit.com#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/#listItem","position":3,"name":"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire","previousItem":{"@type":"ListItem","@id":"https:\/\/sekuritasit.com\/index.php\/category\/uncategorized\/#listItem","name":"Uncategorized"}}]},{"@type":"Organization","@id":"https:\/\/sekuritasit.com\/#organization","name":"Sekuritas IT","description":"Creative solutions to unique challenges.","url":"https:\/\/sekuritasit.com\/","sameAs":["https:\/\/www.facebook.com\/profile.php?id=100086973577423"]},{"@type":"WebPage","@id":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/#webpage","url":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/","name":"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire \u203a Sekuritas IT","description":"Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions. The post Stolen GitHub Credentials Used to Push Fake Dependabot Commits appeared first on SecurityWeek. Read More","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/sekuritasit.com\/#website"},"breadcrumb":{"@id":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/#breadcrumblist"},"author":{"@id":"https:\/\/sekuritasit.com\/index.php\/author\/#author"},"creator":{"@id":"https:\/\/sekuritasit.com\/index.php\/author\/#author"},"datePublished":"2023-09-27T12:39:41+00:00","dateModified":"2023-09-27T12:39:41+00:00"},{"@type":"WebSite","@id":"https:\/\/sekuritasit.com\/#website","url":"https:\/\/sekuritasit.com\/","name":"Sekuritas IT","alternateName":"Sekuritas","description":"Creative solutions to unique challenges.","inLanguage":"en-US","publisher":{"@id":"https:\/\/sekuritasit.com\/#organization"}}]},"og:locale":"en_US","og:site_name":"Sekuritas IT \u203a Creative solutions to unique challenges.","og:type":"article","og:title":"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire \u203a Sekuritas IT","og:description":"Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions. The post Stolen GitHub Credentials Used to Push Fake Dependabot Commits appeared first on SecurityWeek. Read More","og:url":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/","article:published_time":"2023-09-27T12:39:41+00:00","article:modified_time":"2023-09-27T12:39:41+00:00","article:publisher":"https:\/\/www.facebook.com\/profile.php?id=100086973577423","twitter:card":"summary_large_image","twitter:title":"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire \u203a Sekuritas IT","twitter:description":"Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions. The post Stolen GitHub Credentials Used to Push Fake Dependabot Commits appeared first on SecurityWeek. Read More"},"aioseo_meta_data":{"post_id":"7124","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2023-09-27 15:40:46","updated":"2025-10-15 04:42:56","seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/sekuritasit.com\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/sekuritasit.com\/index.php\/category\/uncategorized\/\" title=\"Uncategorized\">Uncategorized<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tStolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/sekuritasit.com"},{"label":"Uncategorized","link":"https:\/\/sekuritasit.com\/index.php\/category\/uncategorized\/"},{"label":"Stolen GitHub Credentials Used to Push Fake Dependabot Commits Ionut Arghire","link":"https:\/\/sekuritasit.com\/index.php\/2023\/09\/27\/stolen-github-credentials-used-to-push-fake-dependabot-commits-ionut-arghire\/"}],"_links":{"self":[{"href":"https:\/\/sekuritasit.com\/index.php\/wp-json\/wp\/v2\/posts\/7124","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sekuritasit.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sekuritasit.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/sekuritasit.com\/index.php\/wp-json\/wp\/v2\/comments?post=7124"}],"version-history":[{"count":0,"href":"https:\/\/sekuritasit.com\/index.php\/wp-json\/wp\/v2\/posts\/7124\/revisions"}],"wp:attachment":[{"href":"https:\/\/sekuritasit.com\/index.php\/wp-json\/wp\/v2\/media?parent=7124"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sekuritasit.com\/index.php\/wp-json\/wp\/v2\/categories?post=7124"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sekuritasit.com\/index.php\/wp-json\/wp\/v2\/tags?post=7124"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}