Codfish/semantic-release-action GitHub Action has been compromisedstepsecurity.io·4 pts·varunsharma07·0
Ongoing NPM supply chain attack uses binding.gyp to spread like a wormgithub.com·6 pts·varunsharma07·0
Hundreds of GitHub Python Repos Compromised via Account Takeover and Force-Pushstepsecurity.io·5 pts·varunsharma07·1
Show HN: Scan your dev machine for AI agents, MCP servers, and IDE extensionsgithub.com·9 pts·varunsharma07·0
Xygeni/xygeni-action GitHub Action is compromised – poisoned tag is still livestepsecurity.io·2 pts·varunsharma07·0
Hackerbot-Claw: AI Bot Exploiting GitHub Actions – Microsoft, Datadog Hit So Farstepsecurity.io·27 pts·varunsharma07·4
GitHub Actions is left vulnerable to supply chain attacks: Datadog Reportdatadoghq.com·4 pts·varunsharma07·0
Cline Supply Chain Attack: Cline 2.3.0 Silently Installs OpenClawstepsecurity.io·12 pts·varunsharma07·1
Harden Runner Detected the SHA1-Hulud Supply Chain Attack in CNCF's Backstagestepsecurity.io·1 pts·varunsharma07·1
Popular Nx Build System NPM Package Compromised with Data Stealing Malwarestepsecurity.io·10 pts·varunsharma07·2
Suspicious Tag Change in AWS's GitHub Action: What Happened and Why It Mattersstepsecurity.io·3 pts·varunsharma07·1
Tj-actions/changed-files GitHub Action Compromised – used by over 23K reposstepsecurity.io·273 pts·varunsharma07·298
CI/CD supply chain attack on Azure Karpenter Provider open-source projectstepsecurity.io·3 pts·varunsharma07·2
Security Breach in Stripe Repo: A Deep Dive into the "Pwn Request" Vulnerabilitystepsecurity.io·7 pts·varunsharma07·0
Show HN: GitHub Actions Advisor – View security scores of GitHub Actions you useapp.stepsecurity.io·3 pts·varunsharma07·0
How Google secures their GitHub Actions workflows with StepSecuritystepsecurity.io·3 pts·varunsharma07·0
Protect Against CI/CD Attacks That Poison GitHub Actions Workflowsinfosecwriteups.com·3 pts·varunsharma07·0
Celebrating Success of 500 Open Source Projects Using StepSecurity's Platformstepsecurity.io·1 pts·varunsharma07·1
Show HN: AI-CodeWise – Transforming Code Reviews with AI-Powered Analysisgithub.com·2 pts·varunsharma07·0