According to a report from Endor Labs, the utility is used in over 23,000 GitHub repositories. The compromised action could impact thousands of CI pipelines, the report said.

The tj-actions/changed-files Attack Explained On March 14, security researchers spotted that the source code of tj-actions/changed-files had been modified. GitHub Actions are continuous integration ...