Introduction GitHub supply chain attacks occur when attackers compromise open-source projects by injecting malicious code. This code then spreads to other projects and organizations that rely on these repositories, leading to potential data breaches, malware infections, and unauthorized access. Incident Overview On March 14, 2025, a major supply chain attack targeted the tj-actions/changed-files GitHub Action, affecting multiple…