Mobile Security & Privacy Major Open-Source Maintainer Accounts Compromised in Renewed "GhostAction" Supply Chain Attack Campaign October 10, 2026 Pevita Pearce Cybersecurity researchers have issued urgent warnings regarding an ongoing, highly sophisticated credential-theft campaign that has successfully compromised high-profile open-source maintainer accounts to covertly inject malicious automated workflows into hundreds of…