Secure your GitHub Actions with StepSecurity

install-compromised-package

Harden-runner policy:

audit

Start time:07 Apr 2026 22:38:36 GMTRunner name:-Duration:48sJob labels:ubuntu-latest

Show:

Show all steps

Step	PID	Process	Destination	Port	Status
Install compromised package	2362	env	registry.npmjs.orgAPI Calls11	443	AllowedNot in baseline - learning	07 Apr 2026 22:38:45
Import package to trigger runtime payload	2391	curl	89.36.224.5	80	AllowedNot in baseline - learning	07 Apr 2026 22:38:50