Security News GitHub Actions Supply Chain Attack Redirects Tags to Steal CI/CD Credentials TheHackerNews Daniel Bender 19 May 2026 Share GitHub Action tags point to malicious commits, exposing CI/CD credentials; 15 second-action tags also compromised.