BlockBeats News, March 23rd, SawWit, founder of SlowMist, stated on social media that "Using GitHub Actions CI/CD mechanism for a supply chain attack on Coinbase, fortunately it was not successful. Otherwise, the next security incident to be exposed would be targeting Coinbase."
The supply chain attack path on GitHub: reviewdog/action-setup -> tj-actions/changed-files -> coinbase/agentkit -> stealing GitHub Personal Access Token (PAT), cloud service related keys, etc. If a company uses reviewdog or tj-actions, they should conduct a self-inspection."
免责声明：投资有风险，本文并非投资建议，以上内容不应被视为任何金融产品的购买或出售要约、建议或邀请，作者或其他用户的任何相关讨论、评论或帖子也不应被视为此类内容。本文仅供一般参考，不考虑您的个人投资目标、财务状况或需求。TTM对信息的准确性和完整性不承担任何责任或保证，投资者应自行研究并在投资前寻求专业建议。