Back
Tool
GitHub Actions
Related CVEs
Recent activity
Supply Chain Attack: GHAPPIER Loader Exploits npm Trusted PublishingOn September 9, 2026, an attacker compromised the maintainer account of the npm package @dforge-core/dforge-mcp for 105 minutes, releasing a malicious loader named GHAPPIER. The at…Multiple Critical Vulnerabilities Exploited in SonicWall and SharePoint SystemsIn July 2026, several critical vulnerabilities were exploited, impacting SonicWall SMA1000 appliances and SharePoint servers. Two zero-day vulnerabilities, CVE-2026-15409 and CVE-2…TeamPCP Compromises Microsoft DurableTask and GitHub Actions in Supply Chain AttackThe TeamPCP threat group has expanded its supply chain attack campaign, compromising the Microsoft DurableTask Python client with versions v1.4.1, v1.4.2, and v1.4.3 found to conta…LiteLLM Supply Chain Attack Exposes Critical CredentialsOn March 24, 2026, two versions of the LiteLLM Python package (1.82.7 and 1.82.8) were compromised on PyPI, embedding credential-stealing payloads. The attack, linked to the TeamPC…Bitwarden CLI Compromised in Supply Chain Attack via npmA malicious version of the Bitwarden CLI password manager was distributed via npm, affecting version 2026.4.0 for a brief window on April 22, 2026. The attack exploited a compromis…Critical Gemini CLI Vulnerability Allows Arbitrary Code ExecutionA critical vulnerability in Google’s Gemini CLI, tracked as CVE-2026-12537, has been disclosed, enabling attackers to execute arbitrary code in CI/CD environments, particularly wit…Checkmarx Jenkins Plugin Compromised by TeamPCP Malware AttackCheckmarx reported a malicious version of its Jenkins AST plugin was uploaded to the Jenkins Marketplace on May 9, 2026. This backdoored plugin, which affects security scans in Jen…Critical RCE Vulnerability in Microsoft GitHub Repository DisclosedA critical flaw in Microsoft's Windows-driver-samples GitHub repository allowed for remote code execution (RCE) via issue submissions. The vulnerability, identified by Tenable, ena…Critical Vulnerability in Claude Code GitHub Actions Exposes Repositories to AttacksA critical supply chain vulnerability in Claude Code’s GitHub Actions, identified by security researcher Ryota K from GMO Flat Security, allows attackers to compromise any reposito…