Infosecurity Magazine·Apr 4, 2025 highTj-actions Supply Chain Attack Traced Back to GitHub Token Compromise#cve-2025-30066#exploit in the wild 5 min1
The Hacker News·Mar 24, 2025 highCoinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets Exposed#cve-2025-30066#cve-2025-30154#vulnerability 6 min
Security Affairs·Mar 20, 2025 criticalU.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalog#cve-2025-24472#cve-2025-30066#cve-2024-55591 in the wild 5 min
The Hacker News·Mar 19, 2025 highCISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise#cve-2025-30066#advisory in the wild 3 min1
Security Affairs·Mar 18, 2025 highGitHub Action tj-actions/changed-files was compromised in supply chain attack#cve-2025-30066#vulnerability 3 min1
The Hacker News·Mar 18, 2025 criticalGitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories#cve-2025-30066#cve-2023-49291#vulnerability 4 min1
The Record·Mar 17, 2025GitHub restores code following malicious changes to tj#cve-2025-30066#vulnerability 3 min1
Infosecurity Magazine·Mar 17, 2025 hightj-actions Supply Chain Attack Exposes 23,000 Organizations#cve-2025-30066#vulnerability 2 min