🧰 GitHub Actions workflows

The items that name it 3

• Spectrmachina/Ztrust
  repo2026-10-22It is written here as GitHub Actions workflows (mutable action tags, pull_request_target, ${{ github.event.* }} script injection, broad token permissions).

  mutable action tags, pull_request_target, ${{ github.event.* }} script injection, broad token permissions

• Anthropic Incident: An AI Agent Published a Malicious Package to PyPI and 15 Real Systems Ran It
  article2026-08-03

  Targeted by hackerbot-claw, which scanned public repositories for exploitable workflows and compromised at least five major projects.

• The OpenSourceMalware Show #15
  talk2026-07-31

  Subject of new hold-for-approval mechanism for workflows identified as potentially malicious.