🧰 gh

The items that name it 3

• GHSL-2026-203: Same-second TOCTOU in jupyterlab/maintainer-tools
  advisory2026-09-04It is written here as gh (GitHub CLI).

  used within the action to query PR info via gh api and check out the PR branch via gh pr checkout

• Microsoft's durabletask PyPI Package Compromised in Supply Chain Attack
  writeup2026-06-09It is written here as gh (GitHub CLI).

  Used by the malware to harvest and exfiltrate GitHub tokens via 'gh auth token' and 'gh auth status --show-token'

• TeamPCP SAP CAP Attack
  writeup2026-05-06It is written here as gh (GitHub CLI).

  Abused via 'gh auth token' command executed by the payload to steal cached GitHub CLI tokens