More than 500 GitHub accounts committed credential-stealing workflows to tens of thousands of repositories since October 7, ...