News for hackers. Stuff that matters.

A comment on Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos.

Re:Tj-actions/changed-files GitHub Action Compromised – used... by Everdred2dx on Saturday March 15, 2025 @02:14AM (#43370388)
How does this siphon the secrets away? It looks like it just dumps them out to stdout and stops there.
[ Parent | on HN ]
Re:Tj-actions/changed-files GitHub Action Compromised – used... by varunsharma07 on Saturday March 15, 2025 @03:11AM (#43370641)
Yes, just prints to the build log, so the risk is higher for public repos. Lot of public repos have creds printed in their build logs due to this compromised action.
[ Parent | on HN ]