Every compromised GitHub Actions package we track

16 packages on the GitHub Actions marketplace, drawn from 5 tracked incidents. Each page lists the exact versions named by the source advisory and what to do if you installed one.

Only versions named by a public advisory are listed. Other versions of these packages are not implicated. Browse incidents