🎯 GitHub Actions cache poisoning

The items that name it 6

• Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure
  article2026-09-24

  Attack in which a malicious pull request injects corrupted dependencies into a shared cache that a later production build uses.

• AI Agent Hacking Writeups
  repo2026-09-17It is written here as GitHub Actions Cache Poisoning (supply-chain compromise).

  supply-chain compromise

• Shai-Hulud was the best thing to happen to supply chain security
  article2026-08-24

  Attacker uses a Pwn Request to poison the Actions cache, then waits for a legitimate release workflow with id-token: write permissions to run, extracting the OIDC token from runner memory and exchanging it through npm's token endpoint (Mini Shai-Hulud II / TanStack)

• Socket: actions/checkout v7 Blocks Unsafe pull_request_target Checkouts
  article2026-06-22

  Used in the TanStack compromise, poisoning caches across the fork-to-base repository boundary

• Socket: Mini Shai-Hulud
  article2026-05-22

  Technique used as part of the chained exploit against TanStack

• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
  article

  Part of the chained GitHub Actions attack used to compromise TanStack's workflow