1.Popular code generator for TanStack Query hit by supply chain wormincident | 2026-08-28 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware
2.Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PRblog | 2026-08-17 14:00 | wiz.io | Original ↗ | .md | #github-actions | #ci-cd | #vulnerability
3.Keyv and friends compromised in active Shai-Hulud supply chain attackincident | 2026-08-04 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #incident-response | #malware
4.AsyncAPI npm packages backdoored via GitHub Actionsincident | 2026-07-14 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #featured | #incident-response
5.M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actionsincident | 2026-07-14 10:33 | wiz.io | Original ↗ | .md | #supply-chain | #malware | #github-actions
6.Compromised GitHub action codfish/semantic-release-action steals CI/CD secretsblog | 2026-06-24 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #devsecops | #secrets
7.State of SDLC Security 2026: How Risk Scales in Modern Developmentblog | 2026-05-26 12:45 | wiz.io | Original ↗ | .md | #ai-security | #github-actions | #research-report
8.Bringing full YAML anchor support to zizmorblog | 2026-05-22 11:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #devsecops | #open-source
9.The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Waveblog | 2026-05-19 08:29 | wiz.io | Original ↗ | .md | #supply-chain | #malware | #credential-theft
10.Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromisedblog | 2026-05-12 01:38 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #malware
11.The (In)security Landscape of AI-Powered GitHub Actions (Part 2/2)blog | 2026-04-30 13:21 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #vulnerability-research
12.From Code to Pipeline: Wiz Code Now Secures Your Build Environmentblog | 2026-04-20 12:00 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #github-actions
13.How to Harden GitHub Actions: An Updated Guideblog | 2026-04-15 13:19 | wiz.io | Original ↗ | .md | #supply-chain | #devsecops | #github-actions
14.Primer on GitHub Actions Security - Threat Model, Attacks and Defenses (Part 1/2)blog | 2026-04-14 11:33 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #github-actions
15.Six Accounts, One Actor: Inside the prt-scan Supply Chain Campaignblog | 2026-04-04 09:36 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #github-actions
16.KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attackincident | 2026-03-23 17:38 | wiz.io | Original ↗ | .md | #supply-chain | #github-actions | #incident
17.Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attackincident | 2026-03-20 15:18 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #github-actions
18.How JFrog’s AI-Research Bot Found OSS CI/CD Vulnerabilities to Prevent Shai Hulud 3.0incident | 2026-03-05 21:27 | jfrog.com | Original ↗ | .md | #ai-security | #rce | #supply-chain
19.s1ngularity: supply chain attack leaks secrets on GitHub: everything you need to knowincident | 2025-08-27 12:00 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #secrets
20.New GitHub Action supply chain attack: reviewdog/action-setupincident | 2025-03-17 21:28 | CVE-2025-30154 | wiz.io | Original ↗ | .md | #supply-chain | #github-actions | #ci-cd
21.Get the TL;DR: tj-actions/changed-files Supply Chain Attackincident | 2025-03-16 00:00 | CVE-2025-30066 | aikido.dev | Original ↗ | .md | #supply-chain | #incident-response | #github-actions
22.Ultralytics AI Library Hacked via GitHub for Cryptominingincident | 2024-12-09 15:56 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #github-actions
23.35 more Semgrep rules: infrastructure, supply chain, and Rubyblog | 2024-12-09 14:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #ruby | #infrastructure-as-code
24.Setting Up CI GitHub Workflows for a New Python Projectblog | 2024-02-06 01:29 | hackerone.com | Original ↗ | .md | #devsecops | #automation | #github-actions
25.A security community success story of mitigating a misconfigurationblog | 2023-09-08 18:47 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #aws
26.Preventing fallout from your CI/CD platform being hackedblog | 2023-06-19 00:00 | aikido.dev | Original ↗ | .md | #cloud | #supply-chain | #cloud-security
27.Resolving Go Modules From JFrog Artifactory Using JFrog CLIblog | 2019-01-21 11:40 | jfrog.com | Original ↗ | .md | #github-actions | #ci-cd | #jfrog
28.Using the JFrog CLI with GitHub Actionsblog | 2019-01-07 17:53 | jfrog.com | Original ↗ | .md | #github-actions | #ci-cd | #jfrog