Five malicious Rust crates and an AI bot exploited CI/CD pipelines and GitHub Actions in Feb 2026, stealing developer secrets ...
The hacker has been luring users in Brazil to download the fake Starlink app through phishing pages that impersonate the Google Play Store.