GitHub Actions typosquatting: A high-impact supply chain attack-in-waiting
September 5, 2024
0 Comments
“This level of access can be risky if an action is malicious — it could install malware, steal secrets, or make covert changes to your code,” the Orca researchers warn.