Product
7 Interestana reports mention GitHub Actions, newest first. Each links back to its publisher, with an AI summary of the original reporting where we have found no publisher terms that forbid one.
Cybersecurity researchers have revealed an ongoing campaign that has injected malicious GitHub Actions workflows into tens of thousands of repositories, compromising two high-profile open-source maintainer accounts. The attackers successfully pushed a malicious workflow into over 340 repositories, leveraging the compromised…
Two GitHub Actions, specifically actions-cool/issues-helper and actions-cool/maintain-one-comment, were found to have been re-enabled and resumed executing malware, months after their initial compromise. These repositories, part of the actions-cool organization, were first compromised during the May 2026 Mini Shai-Hulud campaign.
Cybersecurity researchers from Wiz have identified a significant vulnerability within Snowflake's public snowflakedb/snowflake-connector-net GitHub repository. This flaw, detailed in a security advisory released on March 11, 2024, involves a GitHub Actions workflow that could be exploited to achieve command injection.
Cybersecurity researchers have identified a large-scale campaign that leverages compromised GitHub repositories to launch distributed attacks against cPanel and WebHost Manager (WHM) servers. This sophisticated operation utilizes malicious Packagist development versions across 10 packages, all linked to a legitimate PHP…
Miasma malware has escalated its supply chain attacks by compromising new npm packages and exploiting GitHub Actions, building upon previous campaigns involving the Mini Shai-Hulud and Hades malware families. Researchers observed malicious npm releases targeting the LeoPlatform and RStreams packages…