Malicious npm Package Targets GitHub Actions Workflows

Malicious npm Package Targets GitHub Actions Workflows

First seen 12 Nov 2025, 19:02 UTC •ThehackernewsInfoworld •20.3

Article Content

Browse articles
ThreatCluster

A typosquatted npm package named '@acitons/artifact' infiltrated GitHub Actions, compromising CI/CD workflows by stealing tokens and publishing malicious artifacts. This incident affects developers using GitHub for continuous integration and deployment, highlighting vulnerabilities in package management systems.

How this analysis works

Extracted Entities

1 / 2