2025. ápr. 4.
Biztonsági szemle
Exposed SpotBugs token caused GitHub supply chain intrusion, report finds
Exposed SpotBugs token caused GitHub supply chain intrusion, report finds More than 200 GitHub repositories had their secrets exposed in a supply chain attack against tj-actions/changed-files that was originally aimed at major U.S. cryptocurrency exchange Coinbase as a result of an exfiltrated SpotBugs workflow token, BleepingComputer reports.
Tovább