Login
Roast topics
Find topics
Find it!
From:
blog.pypi.org
(Uncensored)
subscribe
Token Exfiltration Campaign via GitHub Actions Workflows - The Python Package Index Blog
https://blog.pypi.org/posts/2025-09-16-github-actions-token-exfiltration/
links
backlinks
Tagged with:
security
transparency
Roast topics
Find topics
Roast it!
Incident report of a recent attack campaign targeting GitHub Actions workflows to exfiltrate PyPI tokens, our response, and steps to protect your projects.