Popular GitHub Action tj-actions/changed-files is compromised
https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/
#HackerNews #GitHubAction #Security #Compromise #tj-actions #changed-files #Cybersecurity
SemgrepSemgrep | 🚨 Popular GitHub Action tj-actions/changed-files is compromisedPopular GitHub Action tj-actions/changed-files has been compromised with a payload that appears to attempt to dump secrets, impacting thousands of CI pipelines.