Corpus graph previewActor to Incident
Supply Chain GraphPan, zoom, and select actor, campaign, and incident tiers.

Supply Chain graph is loading. Keyboard controls become available after graph initialization.

Supply Chain Incident

Focused Graph View

The persistent graph is framed to this incident while the canonical page heading and details continue below.

270 nodes467 edgesCold links hydrate here

Supply Chain Incident

tj-actions changed-files GitHub Action compromise

The tj-actions/changed-files GitHub Action was compromised, exposing secrets from affected workflow runs through malicious action behavior.

ConfidenceHigh
Evidence LevelResearcher
Attack StageCi Cd Compromise
Source Artifact DivergenceNo

Affected Packages

No structured records.

Affected Releases

No structured records.

Repositories

Organizations

Maintainers

No structured records.

Threat Actors

No structured records.

Campaigns

No structured records.

Build Systems

  • GitHub Actions

Distribution Channels

  • GitHub Actions Marketplace

Compromised Accounts

  • tj-actions GitHub Action release path

Connected Entities

  • GitHub ActionsBuild System
  • GitHub Actions MarketplaceDistribution Channel
  • tj-actionsOrganization
  • tj-actions GitHub Action release pathCompromised Account
  • tj-actions/changed-filesRepository

References