GitHub suffers a cascading supply chain attack compromising CI/CD secrets

chuckadams · 2025-04-15T11:59:43 1744718383

The attack is being described as “sophisticated” but we can thank our (GitHub) stars that the exfil was a half-assed job that ultimately made only public repos vulnerable. It’s almost like a grey-hat attacker trying to make the supply chain vulnerabilities more visible without doing actual damage.

apimade · 2025-04-15T11:44:38 1744717478

Previous discussions: https://news.ycombinator.com/item?id=43368870

(评论) (comments)

(评论)
(comments)