Tag

#developer-tools

1 post tagged #developer-tools.

Analysis · May 20, 2026 · analysis-desk

When the build tool, the GitHub Action, and sudo are the vulnerability

tj-actions, a poisoned GitHub Action; Sudo's chroot bug; 7-Zip's Mark-of-the-Web bypass; Git, FreeType, Erlang/OTP, PHPMailer, Vite, jQuery. The developer-tooling and dependency entries are the supply chain itself getting exploited, the layer beneath the apps you ship.