Threat actors are reportedly using Artex, a tool designed to scan GitHub repositories, to identify exposed secrets and credentials left in code repositories. The malicious use of this scanning capability could enable attackers to gain unauthorized access to systems and services by exploiting inadvertently committed sensitive information. Security researchers are warning developers to implement proper secret management practices and repository scanning protocols to prevent credential exposure.