{"version":"1.0","provider_name":"Web Hosting News","provider_url":"https:\/\/hostingdiscussion.com\/news","author_name":"Justine Juyad","author_url":"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/","title":"GitHub Actions abused to attack hosting servers - Web Hosting News","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"oxtx68Gilf\"><a href=\"https:\/\/hostingdiscussion.com\/news\/github-actions-abused-to-attack-hosting-servers\/\">GitHub Actions abused to attack hosting servers<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/hostingdiscussion.com\/news\/github-actions-abused-to-attack-hosting-servers\/embed\/#?secret=oxtx68Gilf\" width=\"600\" height=\"338\" title=\"&#8220;GitHub Actions abused to attack hosting servers&#8221; &#8212; Web Hosting News\" data-secret=\"oxtx68Gilf\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/\/# sourceURL=https:\/\/hostingdiscussion.com\/news\/wp-includes\/js\/wp-embed.min.js\n<\/script>\n","description":"A security researcher just uncovered something unsettling: attackers turning GitHub&#8216;s own automation tools into a sprawling botnet aimed squarely at web hosting infrastructure, with cPanel and WHM servers as the primary target. Researchers at Socket first spotted the campaign after finding malicious development versions hidden across ten Packagist PHP packages tied to a legitimate developer [&hellip;]"}