[CVE-2025-30066] Get the TL;DR: tj-actions/changed-files Supply Chain Attack

CVE

CVE-2025-30066

Published

2025-03-16 00:00

Collected

2026-07-04 09:56

---
id: 2539
title: "[CVE-2025-30066] Get the TL;DR: tj-actions/changed-files Supply Chain Attack"
cve: CVE-2025-30066
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/get-the-tl-dr-tj-actions-changed-files-supply-chain-attack"
published_at: "2025-03-16 00:00"
tags: ["supply-chain", "incident-response", "github-actions", "ci-cd", "supply-chain-attack", "cicd", "secrets-leakage", "cve-2025-30066", "tj-actions"]
phying_url: "https://phying.com/item/2539"
lang: en
---

# [CVE-2025-30066] Get the TL;DR: tj-actions/changed-files Supply Chain Attack

## Summary

The tj-actions/changed-files GitHub Action, which is currently used in over 23,000 repositories, has been compromised, leaking secrets through workflow logs and impacting thousands of CI pipelines.

## Intelligence Metadata

- **Sources:** aikido.dev
- **CVE:** CVE-2025-30066
- **Published:** 2025-03-16 00:00
- **Original:** https://www.aikido.dev/blog/get-the-tl-dr-tj-actions-changed-files-supply-chain-attack
- **Phying News:** https://phying.com/item/2539