{"title":"GitHub Actions advisories","description":"CI/CD advisories for GitHub Actions: rogue self-hosted runners, leaked workflow secrets and poisoned actions.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://vulnpocalypse.dev/advisories/github-issue-comment-injection-campaign/","title":"GitHub issue and PR comment injection: 83 hidden shell payloads hit workflows in 61 public repositories","url":"https://vulnpocalypse.dev/advisories/github-issue-comment-injection-campaign/","date":"2026-11-12","summary":"Hidden shell commands in GitHub issues, PRs and comments hit 61 repos, including Trivy and MLflow. Find workflows that put issue text into run steps.","tags":["supply-chain","github-actions","ci-cd","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/bufferzonecorp-go-rubygems-ci-stealer/","title":"BufferZoneCorp: 10 Go modules and 7 knot-* Ruby gems stole CI secrets, planted SSH keys and rewired GitHub Actions","url":"https://vulnpocalypse.dev/advisories/bufferzonecorp-go-rubygems-ci-stealer/","date":"2026-11-12","summary":"BufferZoneCorp Go modules and knot-* gems stole SSH, cloud, npm, gh and kube credentials and tampered with GitHub Actions. Check go.mod and Gemfile.lock.","tags":["supply-chain","github-actions","ci-cd","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/ethersphere-bee-js-1330-and-swarm-desktop-0562-compromised/","title":"Ethersphere bee-js 13.3.0 and Swarm Desktop 0.56.2 compromised","url":"https://vulnpocalypse.dev/advisories/ethersphere-bee-js-1330-and-swarm-desktop-0562-compromised/","date":"2026-11-11","summary":"Malicious @ethersphere/bee-js 13.3.0 and Swarm Desktop 0.56.2 steal Swarm wallet files; check for them and rotate keys on any affected host.","tags":["supply-chain","npm","nodejs","github-actions","crypto","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/actions-cool-issues-helper-reenabled-malware/","title":"actions-cool/issues-helper and maintain-one-comment came back online still carrying Mini Shai-Hulud malware","url":"https://vulnpocalypse.dev/advisories/actions-cool-issues-helper-reenabled-malware/","date":"2026-11-11","summary":"Hijacked actions-cool/issues-helper and maintain-one-comment were re-enabled on 16 Sep 2026 with every tag still malicious. Remove them and rotate CI secrets.","tags":["supply-chain","github-actions","ci-cd","ai-tools"]},{"id":"https://vulnpocalypse.dev/advisories/ai-coding-agents-ci-prompt-injection/","title":"AI coding agents in CI: one GitHub issue can reach your secrets","url":"https://vulnpocalypse.dev/advisories/ai-coding-agents-ci-prompt-injection/","date":"2026-11-11","summary":"Prompt injection in GitHub issues let attackers reach CI secrets through Claude Code, Gemini CLI and Codex. Upgrade, and keep untrusted input away from secrets.","tags":["ai-tools","github-actions","ai-tools","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/tanstack-nx-console-github-breach/","title":"TanStack to Nx Console to GitHub: one poisoned npm install led to ~3,800 stolen internal repos (CVE-2026-45321, CVE-2026-48027)","url":"https://vulnpocalypse.dev/advisories/tanstack-nx-console-github-breach/","date":"2026-11-11","summary":"Poisoned TanStack packages stole an Nx developer's GitHub token. A trojaned Nx Console release then hit GitHub and Grafana. Check installs, rotate tokens.","tags":["supply-chain","npm","github-actions","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/teampcp-trivy-litellm-supply-chain/","title":"TeamPCP campaign (CVE-2026-33634): Trivy, KICS, LiteLLM and Telnyx turned into credential stealers","url":"https://vulnpocalypse.dev/advisories/teampcp-trivy-litellm-supply-chain/","date":"2026-11-11","summary":"Poisoned Trivy and KICS actions and images, LiteLLM 1.82.7/1.82.8 and Telnyx 4.87.1/4.87.2 stole CI and developer secrets. Check, then rotate.","tags":["supply-chain","github-actions","pypi","ci-cd","ai-tools"]},{"id":"https://vulnpocalypse.dev/advisories/shai-hulud-npm-worm/","title":"Shai-Hulud npm worm: check installs, rotate tokens, kill rogue runners","url":"https://vulnpocalypse.dev/advisories/shai-hulud-npm-worm/","date":"2026-11-11","summary":"A self-replicating npm worm runs at install time, steals developer and CI secrets, and registers rogue GitHub runners. New waves hit from April to August 2026.","tags":["supply-chain","npm","github-actions"]},{"id":"https://vulnpocalypse.dev/advisories/hacktober-2026-php2shell-nodejs-and-litellm-fixes-binance-probe/","title":"Hacktober 2026: PHP2Shell, Node.js and LiteLLM fixes, Binance probe","url":"https://vulnpocalypse.dev/advisories/hacktober-2026-php2shell-nodejs-and-litellm-fixes-binance-probe/","date":"2026-11-02","summary":"October 2026 brought unrelated incidents, including PHP2Shell, Node.js patches and a malicious LiteLLM 1.107.0; update runtimes and review credentials.","tags":["ai-tools","php","nodejs","pypi","npm","github-actions","ai-tools","crypto","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/ghostaction-github-workflow-secret-theft/","title":"GhostAction returns: fake \"Security Audit\" workflows steal Actions secrets and mine git history for old","url":"https://vulnpocalypse.dev/advisories/ghostaction-github-workflow-secret-theft/","date":"2026-11-02","summary":"Stolen GitHub accounts committed security-audit.yml or github_actions_security.yml to thousands of repos. Search all branches and forks, then rotate.","tags":["supply-chain","github-actions","ci-cd","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/hades-pypi-ensmallen-bioinformatics/","title":"Hades campaign: ensmallen 0.8.101 and 28 more PyPI packages scraped CI runner memory and threatened to wipe home directories","url":"https://vulnpocalypse.dev/advisories/hades-pypi-ensmallen-bioinformatics/","date":"2026-11-02","summary":"Hijacked releases of ensmallen and other graph ML, bioinformatics and AI packages stole CI secrets on import. Kill gh-token-monitor before revoking tokens.","tags":["supply-chain","pypi","github-actions","ci-cd","ai-tools"]},{"id":"https://vulnpocalypse.dev/advisories/elementary-data-pypi-ghcr-backdoor/","title":"elementary-data 0.23.3 backdoor: GitHub Actions comment injection published an infostealer to PyPI and GHCR","url":"https://vulnpocalypse.dev/advisories/elementary-data-pypi-ghcr-backdoor/","date":"2026-11-02","summary":"elementary-data 0.23.3 on PyPI and its GHCR image ran a credential stealer via elementary.pth. Find 0.23.3, move to 0.23.4 or later, and rotate secrets.","tags":["supply-chain","pypi","github-actions","ci-cd","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/wiz-reports-gheist-campaign-using-stolen-github-tokens-to-dump-actions-secrets/","title":"Wiz reports Gheist campaign using stolen GitHub tokens to dump Actions secrets","url":"https://vulnpocalypse.dev/advisories/wiz-reports-gheist-campaign-using-stolen-github-tokens-to-dump-actions-secrets/","date":"2026-10-25","summary":"Wiz reports a campaign planting secret-dumping sync-check workflows via stolen GitHub tokens, hunt for ci-sync branches and rotate exposed secrets.","tags":["ecosystem","github-actions","ci-cd","cloud"]}]}