hacktribunebeta
IncidentsAlertsNewsletterPricingAbout
Live feedSign in with GitHub
Home / Incidents / GitHub Actions

GitHub Actions incidents

Recent GitHub Actions vulnerabilities and malicious packages from OSV and CISA KEV, enriched with EPSS exploit probability.

MODERATEGitHub Actions

Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

anthropics/claude-code-action: before 1.0.74

2 months ago

Tooling for GitHub Actions

Snyk — Scan your dependencies in CI and fix this vulnerability.→Socket — Detect malicious and compromised packages before they ship.→

Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.

All ecosystems

AlmaLinux:10AlmaLinux:8AlmaLinux:9GohexMavenNuGetPackagistPyPIRubyGemscrates.ionpm
hacktribune
Developer security signal for the stack you actually run.
IncidentsTopicsEcosystemsFrameworksPricingAboutRSS
Incident data: OSV · CISA KEV · EPSS (FIRST)