Open source software used by more than 23,000 organizations, some of them in large enterprises, was compromised with credential stealing code after attackers gained unauthorized access to a maintainer account, in the latest open source supply chain attack to roil the Internet. The corrupted package, tj actions changed files , is part of tj actions , a collection of files that used by more than 23,000 organizations. Tj actions is one of many Github Actions , a form of platform for streamlining...

Read the full article at Arstechnica

Wingeek Icon
More Developer News