Back to article
neciudan.dev

https://neciudan.dev/github-actions-poisoning (opens in new tab)

Covers 5 stories See all stories this covers including Postmortem: TanStack NPM supply-chain compromiseCovered by programming.dev, tldr.techDiscussed on r/netsec, r/node, and r/programming

Covers 5 related stories

TanStack Blog·

Postmortem: TanStack NPM supply-chain compromise

Feeds
securitylab.github.com·

Keeping your GitHub Actions and workflows secure: Preventing pwn requests (2021)

Discussed on Hacker News
Feeds
docs.npmjs.com·

Trusted Publishing for NPM Packages

Discussed on Hacker News
Feeds
stepsecurity.io·

Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos

Discussed on Hacker News and Lobsters
Feeds
GitHub·

Zizmor – static analysis for GitHub Actions

Discussed on Hacker News
Feeds

Covered in 2 articles

programming.dev·

GitHub Actions Cache Poisoning is eating open source

Feeds
tldr.tech·

Megalodon Hits 5.7K Repos 🦈, CanaryHunter Token Scan 🔍, Kimwolf Admin Arrested 🚨

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help