Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across developer systems.
The Glassworm campaign has compromised over 151 GitHub repositories and npm packages using invisible Unicode payloads that ...