🧰 codfish/semantic-release-action

The items that name it 5

• The State of Open Source Supply Chain Attacks
  articleas affected products2026-08-23

  GitHub Action with repointed malicious tags.

• codfish/semantic-release-action GitHub Action has been compromised
  writeupas classification.key entities2026-07-01
• simonecorsi/mawesome GitHub Action has been compromised
  advisoryas classification.key entities2026-07-01
• Socket: Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages
  writeupas affected products2026-06-27
• Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets
  writeupas affected products2026-06-24

  GitHub Action compromised via imposter commit attack; floating tags repointed to malicious commits