From Cybersecurity Help – GitHub action compromise exposes secret tokens in build logs
The attack, which occurred sometime before March 14, 2025, involved a threat actor modifying the code of the tj-actions/changed-files GitHub Action. Read More
Tag leaked RSA private keys