CloudHacker Noonabout 14 hours ago
CI/CD Pipeline Attack Exploits Version Tags
8 min read
An attacker compromised a personal access token for the tj-actions/changed-files GitHub Action on March 14, 2025, pushing malicious code under a trusted version tag. The action is used by over 23,000 repositories. The attack breaks the assumption that version tags point to unchanged code.
Level
Hype check
Tap to vote and see what everyone thinks.
