Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour
// AI summary
Attackers turned GitHub issues into a supply chain campaign against 61 public repositories, executing the attack successfully within a second via a vulnerable workflow.
// from the source
'The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully'