Malicious npm package sneaks into GitHub Actions builds

InfoWorld
Nov 12, 2025, 7:00 am134 pts
A malicious npm package named “@acitons/artifact” was found impersonating the legitimate “@actions/artifact” module, directly targeting the CI/CD pipelines within GitHub Actions workflows. According to Veracode findings, the package was uploaded on November 7 and was designed to trigger during the build…

Read Article Share
Share Article
- email
- x.com
- facebook
- pocket
- reddit
- tumblr
- linkedin
- pinterest

Trending Today on Tech News Tube

'The storm is here': Why you and your neighbors may be paying multibillion-dollar bill for AI data centers right now — but that may not last long as more US states join revolt against unjust 'socialist' approach to electricity bills

TechRadar

'The storm is here': Why you and your neighbors may be paying multibillion-dollar bill for AI data centers right now — but that may not last long as more US states join revolt against unjust 'socialist' approach to electricity bills 130

Linux cryptographic code flaw offers fast route to root

The Register

Linux cryptographic code flaw offers fast route to root 129

Elon Musk’s worst enemy in court is Elon Musk

The Verge

Elon Musk’s worst enemy in court is Elon Musk 129

Apple Has Likely Abandoned 'iPad Ultra' Plans

MacRumors

Apple Has Likely Abandoned 'iPad Ultra' Plans 122

Meta is still burning money on AR/VR

TechCrunch

Meta is still burning money on AR/VR 121

First Tesla Semi Rolls Off High-Volume Production Line

Slashdot

First Tesla Semi Rolls Off High-Volume Production Line 103

More banks join SoftBank’s $40 billion OpenAI loan as syndication enters soft-launch phase

The Next Web

More banks join SoftBank’s $40 billion OpenAI loan as syndication enters soft-launch phase 103

Tesla ‘Robotaxi’ unsupervised fleet finally shows some signs of ramping up

Electrek

Tesla ‘Robotaxi’ unsupervised fleet finally shows some signs of ramping up 103

About Tech News Tube

Tech News Tube is a real time news feed of the latest technology news headlines.

Follow all of the top tech sites in one place, on the web or your mobile device.

Featured

Writer launches AI agents that can act without prompts, taking on Amazon,…

Netomi raises $110 million as Accenture and Adobe bet on AI for customer service

Motorola just made silicon-carbon…

Motorola just made silicon-carbon batteries mainstream — here’s what that…

Microsoft levels up Azure Local to make…

Microsoft levels up Azure Local to make it fit for large-scale sovereign clouds

Dreame’s Aurora smartphones look like…

Dreame’s Aurora smartphones look like nothing I’ve ever seen — but will…

Corning reports first-quarter 2026…

Corning reports first-quarter 2026 growth and advances portfolio restructuring…

Microsoft sales beat estimates as Azure…

Microsoft sales beat estimates as Azure growth eases spending concerns

SoftBank is creating a robotics company…

SoftBank is creating a robotics company that builds data centers — and already…

Google to sell its TPUs to some…

Google to sell its TPUs to some customers, who also fancy big-G GPUs

Lenovo sets US$100 billion revenue…

Lenovo sets US$100 billion revenue target as AI PCs and GPU servers drive growth