Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software environments while blending into normal developer activity. GitHub continues to be a scintillating target for attackers because it sits in the middle of the software supply chain and gives threat actors three things they crave: source code, secrets, and automated pipelines t...