Google acquisition target Wiz links fresh supply chain attack to 23K pwned GitHub repos

Researchers identified a chained supply‑chain attack: reviewdog/action-setup was briefly injected with malicious code to exfiltrate a PAT, which was then used to compromise tj-actions/changed-files and leak CI/CD secrets from more than 23,000 repositories. Affected users are advised to stop using the compromised Actions, replace or pin to safe versions, and rotate any exposed credentials.