GitHub supply chain attack spills secrets from 23,000 projects

HELLFIRE

https://www.theregister.com/2025/03/17/supply_chain_attack_github/

It’s not such a happy Monday for defenders wiping the sleep from their eyes only to deal with the latest supply chain attack. StepSecurity disclosed a compromise of the popular GitHub Action tj-actions/changed-files, which works to detect file changes in open source projects, noting that more than 23,000 GitHub repositories currently use the automation project’s code. …

Regards

Somewhat-Reticent

HELLFIRE no evidence

Leave No Trace

HELLFIRE

https://www.theregister.com/2025/03/18/wiz_github_supply_chain/ – Google acquisition target Wiz links fresh supply chain attack to 23K pwned GitHub repos

Infoseccers at Google acquisition target Wiz think they’ve found the root cause of the GitHub supply chain attack that unfolded over the weekend, and they say that a separate attack may have been to blame. …

Regards

HELLFIRE

https://www.theregister.com/2025/04/07/github_supply_chain_attack/ – That massive GitHub supply chain attack? It all started with a stolen SpotBugs token

That massive GitHub supply chain attack that spilled secrets from countless projects? It traces back to a stolen token from a SpotBugs workflow - exposed way back in November, months earlier than previously suspected.

FWIW.

Regards