#tag-poisoning

Xygeni GitHub Action Compromised in Supply Chain Attack

Attackers compromised AppSec vendor Xygeni's GitHub Action through tag poisoning, operating a command-and-control implant for up to one week.