Open-source software used by over 23,000 organisations was compromised by attackers who accessed a maintainer account, injecting credential-stealing code. The corrupted package, part of tj-actions, was able to modify source code and potentially access secret variables. The breach exposed some organisations’ sensitive credentials in freely accessible logs, underlining the need for stringent security protocols in open-source environments.

Qantas cyber attack: Millions of customers affected as names, contact details stolen – NZ Herald
Summarize this content to a maximum of 60 words: Qantas cyber attack: Millions of customers affected as names, contact details stolen NZ Herald