T1606.002
Forge Web Credentials: SAML Tokens
discovered 2026-06-01Exchanges the GitHub Actions OIDC token for npm publish tokens via the registry OIDC exchange endpoint.
View on MITRE ATT&CK
Exchanges the GitHub Actions OIDC token for npm publish tokens via the registry OIDC exchange endpoint.
View on MITRE ATT&CK