BlockBeats News, March 23rd, SawWit, founder of SlowMist, stated on social media that "Using GitHub Actions CI/CD mechanism for a supply chain attack on Coinbase, fortunately it was not successful. Otherwise, the next security incident to be exposed would be targeting Coinbase."
The supply chain attack path on GitHub: reviewdog/action-setup -> tj-actions/changed-files -> coinbase/agentkit -> stealing GitHub Personal Access Token (PAT), cloud service related keys, etc. If a company uses reviewdog or tj-actions, they should conduct a self-inspection."
免責聲明：投資有風險，本文並非投資建議，以上內容不應被視為任何金融產品的購買或出售要約、建議或邀請，作者或其他用戶的任何相關討論、評論或帖子也不應被視為此類內容。本文僅供一般參考，不考慮您的個人投資目標、財務狀況或需求。TTM對信息的準確性和完整性不承擔任何責任或保證，投資者應自行研究並在投資前尋求專業建議。