You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Bug Description
Not a bug, just a report. I'm getting requests looking for (probably) sites that use this acton on their workflows. I'm not using this action, but I think it could be relevant to report that there are active bots looking for this.
Regards!
The text was updated successfully, but these errors were encountered:
Shortly after I started using this action, my server got infected with 'pefctl' (bitcoin miner). The process runs under the user I used for this action.
The credentials were saved only in the Secrets and used only for this action.
I cannot 100% confirm that this action caused the compromise of my credentials, but there is a possibility that something is going on, considering that bots are scanning for the ftp deploy file.
Bug Description
Not a bug, just a report. I'm getting requests looking for (probably) sites that use this acton on their workflows. I'm not using this action, but I think it could be relevant to report that there are active bots looking for this.
Regards!
The text was updated successfully, but these errors were encountered: