Person
Varun Sharma
- First Reported
- May 19, 2026
- Latest Reported
- May 19, 2026
Reported Context (1)
- StepSecurity researcher who reported that the action's tags pointed to an imposter commit containing code that exfiltrated CI/CD credentials. Compromised GitHub Actions Tags Contain Code Targeting CI/CD Credentials
Vendors (1)
Products (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.