News for hackers. Stuff that matters.

A comment on We All Dodged a Bullet. Parent comment

Re:We All Dodged a Bullet by bobbylarrybobby on Tuesday September 09, 2025 @01:22PM (#45185240)
If they'd waited a week before using their ill-gotten credentials to update the packages, would they have been detected in that week?
[ Parent | on HN ]
Re:We All Dodged a Bullet by captn3m0 on Tuesday September 09, 2025 @02:35PM (#45186496)
That is what the tj-actions attacker did: https://unit42.paloaltonetworks.com/github-actions-supply-ch...
[ Parent | on HN ]