skip to content
astropod
sign in
news
Product news and updates from the Gastropod team.
tagged
github-actions ×
Borrowed Compute: How Ten Packagist Libraries Turned GitHub Actions Into an Attack Botnet
2026-07-24 02:49:49 · Chris
vulnerability-intelligence
software-supply-chain-security
composer
+3
github-actions
ci-cd-security
sbom
Asyncapi NPM Supply Chain Attack
2026-07-16 22:24:44 · Chris
vulnerability-intelligence
software-supply-chain-security
npm
+2
github-actions
provenance
Inside the AsyncAPI "Miasma" Attack: When the Pipeline Itself Becomes the Attacker
2026-07-16 00:34:52 · Chris
vulnerability-intelligence
software-supply-chain-security
supply-chain-attack
+3
npm
ci-cd-security
github-actions