Unverified60% confidenceFactTime unknown
ShinyHunters attacked Microsoft's private GitHub repositories.
2
Sources
60%
Confidence
Long-term
Relevance
5/31/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedShinyHunters是自2020年前后活跃至今的国际网络犯罪组织，曾在2020年窃取微软GitHub私有仓库500GB源代码82% similarUnverifiedThe Gheist campaign uses stolen GitHub tokens to implant malicious GitHub Actions workflow files in target repositories in order to steal data.71% similarUnverifiedA compromised GitHub account may be used to inject malicious commits into open-source projects, constituting a software supply chain attack.69% similarUnverifiedGitHub's bug bounty program runs on the HackerOne platform.67% similarUnverified2022年，GitHub曾披露攻击者利用被盗的OAuth令牌访问了多个组织的私有仓库，影响了包括npm在内的多个重要项目66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/9177API
curl https://kongchang.com/api/v1/knowledge/claims/9177MCP
get_claim(id=9177)