Comment on Supply chain attack alert: .github/setup.jsComments−icflorescu3moOSS maintainer, @icflorescu on GitHub, owner of a few affected repos here.My full analysis and IOCs: https://dev.to/icflorescu/the-bot-that-never-was-2mfp (source repo on codeberg: https://codeberg.org/icflorescu/miasma-github-incident)−antiheroOP3moAh, thanks for your write up - was just reading it when I saw the comment.This has royally fucked a lot of people.
Comments
OSS maintainer, @icflorescu on GitHub, owner of a few affected repos here.
My full analysis and IOCs: https://dev.to/icflorescu/the-bot-that-never-was-2mfp (source repo on codeberg: https://codeberg.org/icflorescu/miasma-github-incident)
Ah, thanks for your write up - was just reading it when I saw the comment.
This has royally fucked a lot of people.