The Register on MSN7h
That massive GitHub supply chain attack? It all started with a stolen SpotBugs token
But this mystery isn't over yet, Unit 42 opines That massive GitHub supply chain attack that spilled secrets from countless projects? It traces back to a stolen token from a SpotBugs workflow - ...
Hundreds of GitHub repositories hijacked to trick users into downloading malware
Cybersecurity researchers Kaspersky have iscovered a longstanding, widespread criminal campaign targeting software developers ...
Recent GitHub supply chain attack traced to leaked SpotBugs token
A cascading supply chain attack on GitHub that targeted Coinbase in March has now been traced back to a single token stolen ...
Bleeping Computer18d
GitHub Action supply chain attack exposed secrets in 218 repos
GitHub Action' tj-actions/changed-files' was compromised by attackers who added a malicious commit on March 14, 2025, to dump CI/CD secrets from the Runner Worker process to the repository.