News for hackers. Stuff that matters.
Re:You either die an MVP or live long enough to build conten... by shakna on Wednesday September 29, 2021 @08:04AM (#28692571)
> I'm sure they've built very sophisticated filtering tools, but imagine someone slips through the cracks and gets a cryptominer working.

It's been done, multiple times. Here's a handful (96) of documented cases which are somewhat recent. [0][1]

It seems to be surprisingly easy to abuse the process, and GitHub are continually playing catch up.

[0] https://dev.to/thibaultduponchelle/the-github-action-mining-...

[1] https://www.bleepingcomputer.com/news/security/github-action...

There are no comments on this comment yet.