Infosecurity MagazineApr 4, 2025highTj-actions Supply Chain Attack Traced Back to GitHub Token CompromiseExploited5 min readcve-2025-30066exploit4
The Hacker NewsMar 24, 2025highCoinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets Exposed6 min readcve-2025-30066cve-2025-301543
Security AffairsMar 20, 2025criticalU.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalogExploited5 min readcve-2025-24472cve-2025-300664
The Hacker NewsMar 19, 2025highCISA Warns of Active Exploitation in GitHub Action Supply Chain CompromiseExploited3 min readcve-2025-30066advisory4
Security AffairsMar 18, 2025highGitHub Action tj-actions/changed-files was compromised in supply chain attack3 min readcve-2025-30066vulnerability3
The Hacker NewsMar 18, 2025criticalGitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories4 min readcve-2025-30066cve-2023-492913
The RecordMar 17, 2025GitHub restores code following malicious changes to tj3 min readcve-2025-30066vulnerability3
Infosecurity MagazineMar 17, 2025hightj-actions Supply Chain Attack Exposes 23,000 Organizations2 min readcve-2025-30066vulnerability2