Supply Chain Compromise via GitHub Actions

https://www.securitricks.com/attackreports/supply-chain-compromise-via-github-actions