Christine Lemmer-Webber @cwebber@social.coop
Public

EDIT EDIT EDIT: Yeah just an attack on github actions stepsecurity.io/blog/kubernete

EDIT: I seem to be amending a lot of my posts lately, but actually I am not sure if an agent was involved in this, but a GitHub Actions token exfiltration at minimum was

Even emacs users are not immune to the risks of supply chain attacks from people using LLMs in their toolchain. kubernetes.el compromised via another agent attack old.reddit.com/r/emacs/comment

kubernetes-el Compromised: How a Pwn Request Exploited a Popular Emacs Package - StepSecurity

On March 5, 2026, a threat actor exploited a classic "Pwn Request" vulnerability in the CI workflow of kubernetes-el/kubernetes-el, a popular Emacs package for managing Kubernetes clusters. The attacker stole the repository's GITHUB_TOKEN (with full write permissions), exfiltrated CI/CD secrets, defaced the repository, and injected destructive code.

www.stepsecurity.io

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://social.coop/users/cwebber/statuses/116206210842938432 on your instance and quote it. (Note that quoting is not supported in Mastodon.)