Tag: GitHub Actions

CSBadmin

AsyncAPI npm packages with millions of weekly downloads compromised via GitHub actions

Five AsyncAPI npm packages with 2.9 million weekly downloads were trojanized after a GitHub Actions token theft.

CSBadmin

Packagist Security Alert: Compromised Token Exposes Developer Repositories

Packagist maintainers discovered a GitHub Actions token leak that could allow attackers to compromise PHP package distribution, prompting an urgent…