1 matches found
CVE-2025-30154: Embedded Malicious Code
reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use reviewdog/action-setup@v...
8.6CVSS8AI score0.02437EPSS
SaveExploits2References2
20