
In an alarming discovery, security researchers have uncovered a critical vulnerability in thousands of public GitHub repositories, posing a serious risk to the software supply chain. This vulnerability enables malicious code injection via self-hosted GitHub Actions runners, thus opening the door to high-impact supply chain attacks. With the potential for extensive damage, it is imperative that organizations prioritize robust CI/CD