Vulnerabilityhigh

Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets Exposed

The Hacker Newsby @TheHackersNewsMar 24, 2025 · 05:52 UTC (Mar 24, 2025)5 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2025-30066 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-30066 CVE-2025-30154

Tags: cve-2025-30066 cve-2025-30154 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-30066	Supply Chain Compromise of tj-actions/changed-files GitHub Action Exposes CI/CD Secrets	8.6	72%	KEVPoC ×2	Mar 15, 2025 KEV Mar 18, 2025
CVE-2025-30154	Malicious Code in reviewdog/action-setup GitHub Action Exposes CI/CD Secrets	8.6	2%	KEVPoC	Mar 19, 2025 KEV Mar 24, 2025

From the original article

5 min read at thehackernews.com

The supply chain attack involving the GitHub Action "tj-actions/changed-files" started as a highly-targeted attack against one of Coinbase's open-source projects, before evolving into something more widespread in scope.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.