Popular GitHub Action tj-actions/changed-files is compromised

semgrep.dev

cross-posted to:
programming@programming.dev

Popular GitHub Action tj-actions/changed-files is compromised

semgrep.dev

RSS BotMB to Hacker NewsEnglish · 3 days ago

cross-posted to:
programming@programming.dev

Semgrep | 🚨 Popular GitHub Action tj-actions/changed-files is compromised

semgrep.dev

Popular GitHub Action tj-actions/changed-files has been compromised with a payload that appears to attempt to dump secrets, impacting thousands of CI pipelines.

Comments

You must log in or register to comment.

Chat