The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it ...
CISA confirms cascading attack from reviewdog to tj-actions exposed sensitive credentials across 23,000+ repositories.
The Register on MSN15d
GitHub supply chain attack spills secrets from 23,000 projectsLarge organizations among those cleaning up the mess It's not such a happy Monday for defenders wiping the sleep from their eyes only to deal with the latest supply chain attack.… StepSecurity ...
A compromise of the popular GitHub Actions tool turned into a massive supply chain attack, at this point thought to be ...
CVE-2025-30066 supply chain attack compromised tj-actions on March 14, 2025, exposing 218 repositories and leaking credentials.
Cryptopolitan on MSN9d
Coinbase fends off targeted GitHub Action attack in early-stage breach attemptAccording to the cybersecurity firms analyzing the incident, the attacker initially tried to compromise the Coinbase ...
More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.
Researchers from Palo Alto Networks said the hackers likely planned to leverage an open source project of the company for ...
CISA warns of CVE-2025-30066, a GitHub supply chain attack exposing secrets via compromised actions logs. Update ...
Tens of thousands of repositories have fallen victim to a supply chain attack via a GitHub Action. Security specialists at ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback