Tag: GitHub Actions
Snowflake CI workflow injection leaks Jira tokens through crafted issues
Wiz's Red Agent found a GitHub Actions injection in a Snowflake repository that exposed Jira credentials via a specially crafted…
AsyncAPI npm packages with millions of weekly downloads compromised via GitHub actions
Five AsyncAPI npm packages with 2.9 million weekly downloads were trojanized after a GitHub Actions token theft.
Packagist Security Alert: Compromised Token Exposes Developer Repositories
Packagist maintainers discovered a GitHub Actions token leak that could allow attackers to compromise PHP package distribution, prompting an urgent…