GitHub Workflows - Tool

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 24, 2025
Last Seen
November 24, 2025

GitHub Workflows (GitHub Actions workflows) are repository-defined automation pipelines that run in CI/CD processes.

Overview

GitHub Workflows (GitHub Actions workflows) are repository-defined automation pipelines that run in CI/CD processes. The article notes that Shai-Hulud 2, a new version of the NPM worm, now targets low-code platforms, suggesting potential abuse of automated workflows to propagate or execute malicious payloads within development environments. This widens the attack surface into developer pipelines and supply-chain ecosystems, increasing the significance of protecting workflow configurations and secrets.

Related Threat Clusters

Recent Intelligence Reports

  • Shai-Hulud 2: New version of NPM worm also attacks low-code platforms — Heise.De · November 24, 2025

CVSS v3.1 Breakdown