Covered by 3 sources including The Hacker News, CTO at NCSCDiscussed on Hacker News

On June 24, 2026, an attacker compromised the codfish/semantic-release-action GitHub repository. At 15:39:06 UTC they force-pushed a malicious commit and repointed several version tags to that commit. As a result, any workflow running against those tags after that time executed the attacker's code inside its GitHub Actions runner.

Sign in to keep reading the full article.

Sign Up Log In

Covered in 3 articles

The Hacker News·

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

CTO at NCSC·

CTO at NCSC Summary: week ending June 28th

Discussed on Substack

news.risky.biz·

Codfish/semantic-release-action GitHub Action has been compromised (opens in new tab)

Covered in 3 articles

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

CTO at NCSC Summary: week ending June 28th

Risky Bulletin: Law enforcement agencies and security firms take down Amadey and StealerC