changed-files

A patched clone tj-actions with the malicious commit reverted

2Distinct people

2Mentions

0Explicit recommenders

3GitHub stars

REPOSITORY AT A GLANCE

What to know before exploring

A patched clone tj-actions with the malicious commit reverted

GitHub

No documented product use has been verified yet.

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

No other repository is repeatedly linked in the same discussions.

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

HN mentions by hour2 dated mentions

Observed mentions: 2025-03-15 20:00:25 UTC to 2025-03-15 20:54:29 UTC.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC. One observed period does not establish a trend.

View mention counts and date ranges

UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
Period	Start (UTC)	End (exclusive, UTC)	Mentions	Submissions	Comments
Mar 15, 20:00	2025-03-15 20:00:00 UTC	2025-03-15 21:00:00 UTC	2	0	2

2 sources

For folks looking for a drop-in replacement for v45 (latest major version), we have a patched mirror here: https://github.com/trmlabs/changed-files 1] We took the public mirror from: https://code.forgejo.org/tj-actions/changed-files/src/tag/v4... 2] Undid the malicious code change: https://code.forgejo.org/tj-actions/changed-files/commit/0e5... - You can see the change here: https://github.com/trmlabs/changed-files/commit/8567847ee196... 3] Published under a v1 tag (since we can't vet historical releases and changes and didn't want folks to get confused) If you want to contribute or report an issue, file a GH Issue or ping us at security@trmlabs.com