#self-hosted-runners

[ follow ]
#github-actions #pricing #microsoft #pricing-change #developer-backlash #npm #supply-chain-attack
#github-actions
more#github-actions
Information security
fromThe Hacker News
2 months ago

Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

A renewed Sha1-Hulud supply-chain campaign compromises hundreds of npm packages, executes malicious preinstall scripts, registers self-hosted runners, and exfiltrates secrets.
[ Load more ]