tj-actions/changed-files
View on GitHub ↗ ★ 2,738 TypeScript
:octocat: Github action to retrieve all (added, copied, modified, deleted, renamed, type changed, unmerged, unknown) files and directories.
16 mentions on Hacker News by 13 people: 0 stories, 16 comments · first 2022-09-26 · latest 2025-04-05
20082026
-
…the tj-actions maintainer started locking threads and refusing to look into how the PAT was leaked. https://github.com/tj-actions/changed-files/issues/2464#issu...
comment by cube00 · 2025-04-05 · in Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident -
…Personal Access Token (PAT) and flagged the organization to prevent further exploitation. https://github.com/tj-actions/changed-files/issues/2464#issu...
comment by frenchtoast8 · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
The GitHub repo and org disappeared while I was poking around. Both https://github.com/tj-actions and https://github.com/tj-actions/changed-files return 404.
comment by skwashd · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
User and repo all 404 now. https://github.com/tj-actions https://github.com/tj-actions/changed-files
comment by phantomathkg · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
…creds being compromised. The [malicious commit is masquerading as a commit from Renovate]( https://github.com/tj-actions/changed-files/commit/0e58ed867... )(( https://github.com/apps/renovate ) but it's not a `verified` commit (and so it's…
comment by werrett · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
…account, but unclear if it has write access. Edit: gurchik's guess at https://github.com/tj-actions/changed-files/issues/2463#issu... seems more likely: > 1. Fork the repository > > 2. Push compromised code to the fork > > 3. Up
comment by captn3m0 · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
> https://github.com/tj-actions/changed-files/pull/2460 This kind of auto dependency bump bots are more trouble than their worth. If your app works today, bumping random deps won’t make it work better in any meaningful sense in 95% of…
comment by oefrha · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
…ps://github.com/chains-project/maven-lockfile/issues/1085... > After some cleanup the changed-files ( https://github.com/tj-actions/changed-files ) action seems to be more work to remove. It would be awesome if it could be added to the…
comment by mdaniel · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
A list of projects claimed to be using it from the GitHub page: https://github.com/tj-actions/changed-files?tab=readme-ov-fi...
comment by mellosouls · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
…specific case, the bad actor changes all of the version tags to point to their malicious commit: https://github.com/tj-actions/changed-files/tags This required compromising the entire repository, yes? It can't be explained as the…
comment by zahlman · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
…specific case, the bad actor changes all of the version tags to point to their malicious commit: https://github.com/tj-actions/changed-files/tags So to avoid that you'd have to pin your GitHub Action to specific commits as outlined in this…
comment by werrett · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
…In this case the bad actor changed all of the version tags to point to their malicious commit. See https://github.com/tj-actions/changed-files/tags All the tags point to commit `^0e58ed8` https://github.com/tj-actions/changed-files/commit/0…
comment by werrett · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
…here -- the bad actor changed all of those version tags to point to their malicious commit. See https://github.com/tj-actions/changed-files/tags All the tags point to commit `^0e58ed8` https://github.com/tj-actions/changed-files/commit/0e58…
comment by werrett · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
Pretty good timing on the attacker. https://github.com/tj-actions/changed-files/tags?after=v35.9... Most folks around the world signed off. B-squad probably left cleaning up remaining tasks or just fucking around with co-workers and…
comment by xyst · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
https://github.com/tj-actions/changed-files/issues/2463
comment by varunsharma07 · 2025-03-14 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
See this action: https://github.com/tj-actions/changed-files
comment by thaeli · 2022-09-26 · in GitHub Actions Pitfalls