GitHub Marketplace — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
June 4, 2026
Last Seen
June 25, 2026

GitHub Marketplace is a technology platform tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed June 4, 2026; most recent activity June 25, 2026.

Related Threat Clusters

  • GitHub Actions Enhances Security Against 'Pwn Request' Attacks

    GitHub has released actions/checkout v7 to mitigate vulnerabilities associated with the pull_request_target workflow trigger, which has been exploited in 'pwn request' attacks. This update, announced on June 18, 2026,…

    9 articles · Updated June 22, 2026
  • 38% of GitHub Actions Workflows Vulnerable to Script Injection

    Analysis shows that 38% of organizations using GitHub Actions workflows are exposed to script injection and unsafe trigger configurations. This vulnerability poses a significant risk in software supply chains, as GitHub…

    2 articles · Updated June 4, 2026

Recent Intelligence Reports

  • Github Actions Security Guide — www.wiz.io · June 25, 2026
  • Case For Github Actions Security — securitylabs.datadoghq.com · June 4, 2026

CVSS v3.1 Breakdown