Changed Files
1 CVEs
product
Monthly
tj-actions/changed-files GitHub Action was compromised in a supply chain attack where modified tags pointed to credential-stealing code, exposing secrets from GitHub Actions workflows across thousands of repositories.
Information Disclosure
Changed Files
NVD
GitHub
CVSS 3.1
8.6
EPSS
92.0%
CVE-2025-30066
EPSS 92%
CVSS 8.6
HIGH
POC
KEV
THREAT
Act Now
tj-actions/changed-files GitHub Action was compromised in a supply chain attack where modified tags pointed to credential-stealing code, exposing secrets from GitHub Actions workflows across thousands of repositories.
Information Disclosure
Changed Files
NVD
GitHub