tj-actions hack started in Dec 24 with SpotBugs compromise

https://unit42.paloaltonetworks.com/github-actions-supply-chain-attack/#update-4-2-25 submitted by /u/Hefty_Knowledge_7449 [link] [comments]

from hacking: security in practice https://ift.tt/xOkY39S