corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0d4b5-15c5-72fb-9ccc-532d892f4dc6

GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident: Threat Assessment (Updated 4/2)

Unit 42 · published 21 March 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unit42.paloaltonetworks.com Wayback capture
7blogs citing
First cited
28 Mar 2025
Most recent
22 Sept 2026
Rank this month
not ranked
Links from this post
71
Words captured
7,531

Cited by

Blog
In the post
Date
Andrew Nesbitt | Software Engineer and Package Management Nerd
Unfinished Work in Package Security Read at the source ↗
22 Sept 2026
haitmg.pl
12 Steps to Secure GitHub Actions After the Trivy Attack Read at the source ↗
15 Apr 2026
devansh
[CVE-2026-25598] Bypassing Outbound Connections Detection in harden-runner Read at the source ↗
11 Feb 2026
vivianvoss.net
CI/CD Pipelines: What You Actually Pay Read at the source ↗
24 Jan 2026
blog.kammel.dev
Comparison of GitHub Action Scanners Read at the source ↗
17 May 2025
datosh.github.io
Comparison of GitHub Action Scanners Read at the source ↗
17 May 2025
metamask.io
Crypto Security Report: March 2025 Read at the source ↗
28 Mar 2025

Links from this post

Link
Host
https://docs.github.com/en/actions/about-github-actions/understanding-github-actions
docs.github.com
https://github.com/tj-actions/changed-files/issues/2463
github.com
https://x.com/adnanthekhan/status/1901248035830542619
x.com
https://github.com/reviewdog/reviewdog/issues/2079
github.com
https://start.paloaltonetworks.com/contact-unit42.html
start.paloaltonetworks.com
https://unit42.paloaltonetworks.com/tag/supply-chain/
unit42.paloaltonetworks.com
https://unit42.paloaltonetworks.com/tag/github/
unit42.paloaltonetworks.com
https://github.com/tj-actions/changed-files/commit/0e58ed8671d6b60d0890c21b07f8835ace038e67
github.com
https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised
stepsecurity.io
https://github.com/reviewdog/action-setup/commit/f0d342
github.com
https://github.com/reviewdog/inviter
github.com
https://github.com/haya14busa
github.com
https://github.com/0xdead8ead/gitfraud?tab=readme-ov-file
github.com
https://docs.github.com/en/repositories/viewing-activity-and-data-for-your-repository/understanding-connections-between-repositories
docs.github.com
https://github.com/reviewdog/action-setup/commit/8d73381aa1c2ccd12c8ddcfefa47aeb1443e67e3
github.com
https://docs.github.com/en/site-policy/acceptable-use-policies/github-acceptable-use-policies
docs.github.com
https://github.com/coinbase/agentkit?tab=readme-ov-file
github.com
https://github.com/coinbase/agentkit/pull/570
github.com
https://github.com/coinbase/agentkit/commit/8edc60f030035f377780f421431a7ac66828253d
github.com
https://github.com/coinbase/agentkit/commit/b3a1c722b2aed7fa3e373fb04861826a7a00d0aa
github.com
https://github.com/coinbase/agentkit/commit/b39e2d4c31bc786b3a93ea832da887debfee1fc1
github.com
https://www.paloaltonetworks.com/blog/cloud-security/github-actions-worm-dependencies/
paloaltonetworks.com
https://github.com/spotbugs/spotbugs/commit/f5434e31b6259b4e08684618a305bae127b6d784
github.com
https://securitylab.github.com/resources/github-actions-preventing-pwn-requests/
securitylab.github.com
https://owasp.org/www-project-top-10-ci-cd-security-risks/CICD-SEC-04-Poisoned-Pipeline-Execution
owasp.org
https://github.com/spotbugs/sonar-findbugs/pull/1116/files
github.com
https://www.flaticon.com/free-icon/hacker_6463392?term=attacker&page=1&position=21&origin=search&related_id=6463392
flaticon.com
https://owasp.org/www-project-top-10-ci-cd-security-risks/
owasp.org
https://www.paloaltonetworks.com/cortex/cloud/application-security
paloaltonetworks.com
https://github.com/reviewdog/action-setup/commit/0f176b316e1d41a945e574fc2ba76b0dc752d585
github.com
https://github.com/reviewdog/action-setup/commit/96be5a72d8adac89200e08658f69273912fe4783
github.com
https://github.com/reviewdog/action-setup/commit/61902a2b3c982d3551ad219bb0ff22f3663e44de
github.com
https://github.com/reviewdog/action-setup/commit/f966d8d897bc8033657b8e77da56a988029ce8c7
github.com
https://github.com/reviewdog/action-setup/commit/909ace6b17fc4045030e55f5ac27ca99f276ae80
github.com
https://github.com/reviewdog/action-setup/commit/454c8a19a12cde77505464d7e4549500c8ac68d0
github.com
https://github.com/reviewdog/action-setup/commit/04d5b6d4c18c06d7df6edabf914d0ded986c3a87
github.com
https://github.com/reviewdog/action-setup/commit/81796e43b6348d628e3e739a910d50704a5292c1
github.com
https://github.com/reviewdog/action-setup/commit/c27af8180030e1f3d0434473731f030dc1849edf
github.com
https://github.com/reviewdog/action-setup/commit/efa6ce46bcaa8751ad223e44be7977798c909304
github.com
https://github.com/reviewdog/action-setup/commit/143a52c0d919c1a69bdeafeab564650f6939a2b3
github.com
https://github.com/reviewdog/action-setup/commit/31b1df0e735ad8511fd7df3be8cf9351d8cb4de7
github.com
https://github.com/reviewdog/action-typos/commit/26f36301be817815fbcb896d2c85e89f04b17df4
github.com
https://github.com/reviewdog/action-typos/commit/9bb460e92befdbb6506d2e643ae06c8b50205f97
github.com
https://github.com/reviewdog/action-typos/commit/75b5741c6bd9de9815741a40a41844598d409e7b
github.com
https://github.com/reviewdog/action-typos/commit/f33bbbbf1282af26b285a9a131e0bd43ca355e79
github.com
https://github.com/reviewdog/action-typos/commit/3a06be07e9c02ee1c5fede46928b6031d8d2383c
github.com
https://github.com/reviewdog/action-typos/commit/6db74f2d6b0600b8e38cf24b18fda283217e5ffb
github.com
https://github.com/reviewdog/action-typos/commit/1d10399139bd16e69ed2b7dbfda38735ea1cf324
github.com
https://github.com/reviewdog/action-typos/commit/3b9482055ba84ea8761eed6b3b9ecf9e79692a55
github.com
https://github.com/reviewdog/action-typos/commit/6c7b129ed2bbb59ed684c3847a587f4f4e94eaf8
github.com
https://github.com/reviewdog/action-typos/commit/cb6e155e9dec580de71f0fe89f832d2d9932997b
github.com
https://github.com/reviewdog/action-typos/commit/eb183376a83bdc6ecfc8168b22ffa6e2b1a9cb6e
github.com
https://github.com/reviewdog/action-typos/commit/5db6a72f3984e847a2a7d2a25169ca5e849798da
github.com
https://github.com/reviewdog/action-typos/commit/16c5092f4eb672004001d9bcdc0cf693fb76c1b4
github.com
https://github.com/reviewdog/action-typos/commit/1368857b9c9a47ba08727409ae9fbdeeba8a590a
github.com
https://github.com/reviewdog/action-typos/commit/48fbacf68b808429af544d0d7ebd90a5b4cec642
github.com
https://github.com/coinbase/agentkit/commit/0723a75a67a1de4b1b1c6cd66a8cab551023fc30
github.com
https://github.com/coinbase/agentkit/commit/868213ddd4dad8b24a3cb716a6ccc9f89e10d087
github.com
https://github.com/coinbase/agentkit/commit/8a269616e225e93b8f74d0eb4a86be041a493a76
github.com
https://github.com/coinbase/agentkit/commit/71f4822157821d0998d4a0f8e9e849cdcce9bdd2
github.com
https://github.com/coinbase/agentkit/commit/18b3e737f9449d94d73fad0bca718ba677676ac7
github.com
https://github.com/coinbase/agentkit/commit/1ca37970d73ee40c173725de97fc8696aac93aa1
github.com
https://github.com/coinbase/agentkit/commit/bbbb1c63ceae1e7fb40054bb763f407dc200b37d
github.com
https://github.com/coinbase/agentkit/commit/2161165ec14fcb9d985970c353e17e84794fd694
github.com
https://github.com/coinbase/agentkit/commit/823bd75199f474ea7abdbe3a5debf9825c490156
github.com
https://github.com/coinbase/agentkit/commit/9cefe659a770b8d32ffe5f08f44de6456d9592af
github.com
https://github.com/coinbase/agentkit/commit/c00af6911bf03512d130462b6b7fe6a286f7ec98
github.com
https://github.com/coinbase/agentkit/commit/db25249e859d0259011a2f820ec75b5d1047c99b
github.com
https://github.com/coinbase/agentkit/commit/a3bbd802082446e36b8976de78a7727e71638e36
github.com
https://github.com/coinbase/agentkit/commit/faf8d9d8b35369541d38f8d087d71e92cbeadd6b
github.com
https://github.com/spotbugs/sonar-findbugs/pull/1116
github.com