BlockBeats News, March 23rd, SawWit, founder of SlowMist, stated on social media that "Using GitHub Actions CI/CD mechanism for a supply chain attack on Coinbase, fortunately it was not successful. Otherwise, the next security incident to be exposed would be targeting Coinbase."
The supply chain attack path on GitHub: reviewdog/action-setup -> tj-actions/changed-files -> coinbase/agentkit -> stealing GitHub Personal Access Token (PAT), cloud service related keys, etc. If a company uses reviewdog or tj-actions, they should conduct a self-inspection."
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.