Repository Compromised with Shai-Hulud `.claude/settings.json` and `.vscode/tasks.json` files
Đang mở
- Ngôn ngữ chính
- TypeScript
- Star
- 17.7k
- Fork
- 596
- Chỉ số merge pull request
- Không có pull request nào được merge trong 30 ngày
Mô tả
This repository contains a malicious .vscode/tasks.json and .claude/settings.json in the default branch both of which execute the Shai-Hulud malware.
https://github.com/aidenybai/million/commit/37333a956a6d39959c4ad25fe572b9450d064ba8
The payload was injected as a result of the compromised actions-cool/issues-helper reusable action.
* **Ref**
https://www.stepsecurity.io/blog/actions-cool-issues-helper-github-action-compromised-all-tags-point-to-imposter-commit-that-exfiltrates-ci-cd-credentials
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.