Supply Chain Compromise via GitHub Actions

https://www.securitricks.com/reports/supply-chain-compromise-via-github-actions/