Aikido Security reports that stolen credentials for 4,837 GitHub accounts were used to install a CI secret stealer in at least 1,806 repositories. SafeDep separately counted malicious commits in 8,093 public repositories, and the report says exposed secrets and cloud roles should be treated as compromised.