2025-03-15 · 2025-Q1
tj-actions/changed-files GitHub Actions Supply Chain Attack
Layer tags: not yet tagged.
Target
23,000+ GitHub repositories
Impact
Access keys, GitHub PATs, npm tokens, and private RSA keys exposed in public workflow logs
Root Cause
Compromised GitHub PAT; chained via reviewdog/action-setup