#cicd-credential-theft

[ follow ]
#github-actions #supply-chain-attacks #npm-malware #data-visualizationreact-packages
Information security
fromSecurityWeek
5 hours ago

Over 320 NPM Packages Hit by Fresh Mini Shai-Hulud Supply Chain Attack

A compromised NPM maintainer account published malicious package versions that triggered multi-stage credential theft and persistence across CI environments and developer tooling.
Information security
fromThe Hacker News
1 day ago

GitHub Actions Supply Chain Attack Redirects Tags to Steal CI/CD Credentials

Compromised GitHub Actions workflows use imposter commits to steal CI/CD credentials and exfiltrate them to attacker-controlled servers.
[ Load more ]