Revealed: Coinbase Targeted in Sophisticated GitHub Actions Supply Chain Attack

Coinbase was the primary target in a sophisticated GitHub Actions supply chain attack that compromised hundreds of repositories. Attackers first breached the reviewdog/action-setup@v1 GitHub Action to dump CI/CD secrets from workflow logs, then used a stolen Personal Access Token to inject...