We know a bit more about the GitHub Actions supply chain attack from last month. Palo Alto’s Unit 42 has been leading the ...

Leaked SpotBugs PAT in November 2024 led to a GitHub supply chain attack, compromising Coinbase in March 2025.

Evidence shows a SpotBugs token compromised in December 2024 was used in the March 2025 GitHub Actions supply chain attack.

Developers get free and targeted advanced secret scanning features on GitHub to protect organizations from exposed secrets.

A cascading supply chain attack on GitHub that targeted Coinbase in March has now been traced back to a single token stolen ...

GitHub has announced new capabilities to help organizations and developers keep secrets in their code protected.

Over 39 million secrets like API keys and account credentials were leaked on GitHub throughout 2024, exposing organizations ...