安全攻防 morning

热门 GitHub Action 标签重定向至 Impostor Commit 窃取 CI/CD 凭证

摘要

In yet another software supply chain attack, threat actors have compromised the popular GitHub Actions workflow, actions-cool/issues-helper, to run malicious code that harvests sensitive credentials a

the that commit yet another

2026-05-19 1 阅读 约1分钟阅读 info@thehackernews.com (The Hacker News)