Sebastion
←All topics

ci-cd

4 pieces of writing

security13 min read

May 2026 developer-tooling compromises: VS Code extensions, PyPI packages and GitHub Actions turned workstations into supply-chain targets

May 2026 supply-chain compromises showed that poisoned developer tooling now targets the identity and execution layer before code reaches a repository.

security11 min read

GitHub Actions OIDC and TanStack show why 2026 supply chain attacks target release authority

security9 min read

From tj-actions to LiteLLM to MCP: supply chain compromise now operates at infrastructure scale

When a GitHub Action rewrites its own history
security6 min read

When a GitHub Action rewrites its own history

A compromised GitHub Action silently rewrote every version tag to point at a single malicious commit - exposing secrets across 23,000 repositories in the process.