Back to emschwartz's feed

🔓Supply Chain Attacks theregister

TanStack weighs invitation-only pull requests after supply chain attack (opens in new tab)

Covers 3 stories including Keeping your GitHub Actions and workflows secure: Preventing pwn requests (2021)Covered by kite.kagi.comDiscussed on Hacker News

Shai-Hulud worm exploited GitHub Actions misconfiguration to poison shared cache, now project weighing nuclear option on unsolicited contributions

Read the original article

Sign in to keep reading the full article.

Covered in 1 article

In other languages

kite.kagi.com·

Shai-Hulud 클론을 통해 확산되는 Npm 공급망 공격