The Mutable Tag Trap: Critical 9.4 CVSS Attack on Xygeni GitHub Action Exposes CI/CD Pipelines Malware Vulnerability Report The Mutable Tag Trap: Critical 9.4 CVSS Attack on Xygeni GitHub Action Exposes CI/CD Pipelines Do Son March 12, 2026 0 In a sophisticated supply chain manipulation, the xygeni-action GitHub Action was recently targeted by a critical “tag... Read More Read more about The Mutable Tag Trap: Critical 9.4 CVSS Attack on Xygeni GitHub Action Exposes CI/CD Pipelines