
The GitHub Actions utility tj-actions/changed-files, widely used by app developers, experienced a severe security incident on March 14, 2025, when it was infiltrated by hackers. These threat actors inserted a piece of malicious code into the utility, impacting numerous organizations and applications by stealing sensitive credentials. The incident shed light on the vulnerabilities within the CI/CD pipeline, especially affecting those










