GitHub Actions workflows identified as common weak link in open source supply chain attacks
By
Andrew Nesbitt
The kind of bagel that ruins lesser bagels for you.
Summary
This article analyzes a series of high-profile open source supply chain security incidents from the past 18 months, tracing them back to GitHub Actions workflow files (.github/workflows YAML). It covers incidents including Ultralytics shipping a crypto miner to PyPI, nx packages harvesting credentials from thousands of developer machines, tj-actions leaking secrets from 23,000 repositories, Trivy being compromised twice in three weeks, and elementary-data publishing a malicious wheel shortly after a stranger's GitHub comment. The article argues that GitHub Actions features and misconfigurations are a common weak link across these diverse attacks, highlighting systemic security vulnerabilities in CI/CD pipeline configurations.
Key quotes
· 3 pulledPick almost any open source supply chain incident from the past eighteen months and trace it back, and you end up reading a .github/workflows YAML file.
Ultralytics shipping a crypto miner to PyPI, the nx packages that turned thousands of developer machines into credential harvesters, tj-actions leaking secrets from 23,000 repositories, Trivy getting compromised twice in three weeks, elementary-data publishing a malicious wheel ten minutes after a stranger left a GitHub comment.
Different headline payloads, different victims, and in each case a GitHub Actions feature behaving as designed became the attacker's entry point.
You might also wanna read
GitHub patches critical remote code execution vulnerability in under six hours after AI-assisted discovery
GitHub patched a critical remote code execution vulnerability in under six hours last month. The flaw, discovered by Wiz Research using AI m
The Verge·1mo ago
AWS well-architected framework best practices for software supply chain security
This article discusses software supply chain security best practices in the context of recent npm Registry attacks (Shai-Hulud, Chalk/Debug,
aws.amazon.com·4d ago
Microsoft uncovers supply chain attack: Compromised @antv npm packages steal CI/CD credentials via Mini Shai-Hulud malware
Microsoft has identified an active supply chain attack targeting the @antv npm package ecosystem. A threat actor compromised an @antv mainta
September 2025 NPM supply-chain attack compromises popular JavaScript packages
In September 2025, a coordinated software supply-chain attack targeted multiple popular NPM packages in the JavaScript ecosystem. The attack
Microsoft uncovers npm supply chain attack stealing cloud and CI/CD credentials via typosquatted packages
Microsoft identified an active supply chain attack (Mini Shai-Hulud campaign) targeting the npm package ecosystem. On May 28, 2026, a threat
GitHub Actions suffers three-hour outage with false 'account suspended' error
GitHub Actions experienced a major outage lasting over three hours, during which users saw an alarming but incorrect error message stating "
theregister.com·2d ago