Popular GitHub Action tj-actions/changed-files is compromised

semgrep.dev

cross-posted to:
programming@programming.dev

Popular GitHub Action tj-actions/changed-files is compromised

semgrep.dev

RSS Bot@lemmy.bestiver.seMB to Hacker News@lemmy.bestiver.seEnglish · 5 days ago

cross-posted to:
programming@programming.dev

Semgrep | 🚨 Popular GitHub Action tj-actions/changed-files is compromised

semgrep.dev

Popular GitHub Action tj-actions/changed-files has been compromised with a payload that appears to attempt to dump secrets, impacting thousands of CI pipelines.

Comments

You must log in or register to comment.

Chat