Compromised package, severity critical
wfx-loot campaign pushes secret stealer into tens of thousands of GitHub repos; Packagist and Go packages compromised
Published
Since November 10, an attacker using stolen GitHub credentials has pushed a credential-stealing payload into tens of thousands of repositories. In more than 1,800 the malware ran and sent GitHub Actions secrets and cloud credentials to attacker servers. The payload also reached Packagist package digitalelvis/neuronai-studio 3.14.3 and Go module github.com/onuragtas/docker-env v1.0.278 and v1.0.280.
What's affected
- digitalelvis/neuronai-studio (packagist)3.14.3
- github.com/onuragtas/docker-env (go)v1.0.278; v1.0.280
- githubevery version
Exposure window: UTC.
What to do
- Look for a wfx-docs branch, a pull request titled "docs: dependency audit notes", or commits titled "ci: refresh build cache", "chore: add ci helper" or "chore: add dependency audit workflow".
- If the payload ran, treat every secret and cloud role the affected workflows could reach as compromised and rotate them.
- Find and remove AWS role trust policy changes and Azure federated identity credentials in every cloud account tied to the affected workflows, because they survive secret rotation.
- Treat any machine that installed or opened the Packagist package digitalelvis/neuronai-studio 3.14.3 as compromised.
Secrets to rotate if you were affected
GitHub tokens, Cloud credentials, SSH keys, AI API keys, Environment variables, Package registry tokens.
Check whether you were affected
To check a machine, run this in Claude Code with the Pharon plugin, in the repository that uses it. The check is free and needs no account:
/pharon:check-incident wfx-loot-github-actions-secret-stealer-2026-11Don't wait for the next one to reach the news. Pharon tells the team that owns the affected repo within minutes. Free for 7 days, no card.
Get alerted for the next oneReferences
Notice wfx-loot-github-actions-secret-stealer-2026-11, signed with key feed-prod-2026-10 (Ed25519). The Pharon CLI verifies the signature before using a notice.