Technology ❯ Cybersecurity ❯ Vulnerabilities

Supply Chain Attacks

AWS CodeBuild npm Registry Incident Response GitHub Actions AI Security

Cline CLI npm Token Compromise Pushed Tainted Release That Installed OpenClaw

The breach spotlights AI-driven issue triage and GitHub Actions cache poisoning as a viable route to publication credential theft.

AWS Confirms CodeBuild Webhook Misconfigurations in Key Repositories, Reports No Exploitation