Product
pyxel
- First Reported
- Oct 9, 2026
- Latest Reported
- Oct 9, 2026
Reported Context (1)
- windows lasting minutes. Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel, the attacker pushed a malicious workflow to 27 repositories starting at 13:20 UTC. Eight hours later, the GhostAction Adds Git-History Credential Harvesting to Malicious GitHub Workflows
People (2)
MITRE ATT&CK (7)
Vendors (2)
Products (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.