←back to thread

Public secrets exposure leads to supply chain attack on GitHub CodeQL

(www.praetorian.com)
297 points cyberbender | 2 comments | 3/30/2025, 7:54:00 PM | HN request time: 0.428s | source
1. atxtechbro ◴[3/30/2025, 10:04:00 PM] No.43528107[source]▶

Is this fixed?

replies(1): >>43529418 #
2. lsllc ◴[3/31/2025, 12:46:00 AM] No.43529418[source]▶

It's in the article (and the comments here) -- yes, it was remediated within 3 hours of being reported back in January by GitHub.