ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps GuidanceSecurity Affairs·Mar 12, 08:49 UTC · Mar 12, 2026AdvisoryCVE-2025-5518260
CISA Warns of Active Exploitation in GitHub Action Supply Chain CompromiseThe Hacker News·Mar 19, 06:31 UTC · Mar 19, 2025Advisory in the wildCVE-2025-3006660