corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a087ad-0615-73f2-919f-e842a45d08ad

GitHub Actions Cache Poisoning is eating open source

neciudan.dev · published 17 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at neciudan.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
11
Words captured
3,784

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
How to steal npm publish tokens by opening GitHub issues Read at the source ↗
neciudan.dev
Postmortem: TanStack npm supply-chain compromise Read at the source ↗
tanstack.com
https://github.com/AdnaneKhan/ActionsCacheBlasting
github.com
The Monsters in Your Build Cache - GitHub Actions Cache Poisoning Read at the source ↗
adnanthekhan.com
https://securitylab.github.com/resources/github-actions-preventing-pwn-requests/
securitylab.github.com
https://github.com/woodruffw/zizmor
github.com
https://docs.npmjs.com/trusted-publishers
docs.npmjs.com
https://safedep.io/mass-npm-supply-chain-attack-tanstack-mistral
safedep.io
Clinejection — Compromising Cline's Production Releases just by Prompting an Issue Triager Read at the source ↗
adnanthekhan.com
https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised
stepsecurity.io
https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx
github.com