Ccrimsondhaksinhelgafinn.hashnode.dev·3d ago · 6 min readThe dead assets you can no longer grep forEvery app accumulates resources nothing uses. An image outlives the screen that displayed it. A colour survives the design system that named it. A localization key outlasts the copy it translated. Non00
Ccrimsondhaksinhelgafinn.hashnode.dev·3d ago · 6 min readThe pin you stopped readingIn March 2025 an attacker compromised tj-actions/changed-files and rewrote its release tags to point at malicious code. The injected code dumped runner memory into workflow logs, which on a public rep00
