T1606.002

Forge Web Credentials: SAML Tokens

Exchanges the GitHub Actions OIDC token for npm publish tokens via the registry OIDC exchange endpoint.

discovered 2026-06-01
View on MITRE ATT&CK ↗

Seen in packages

Campaigns