GitHub Actions Used in Supply Chain Attack
GitHub Actions was one of the distribution ecosystems used by TeamPCP to push poisoned versions of open-source projects.
GitHub Actions was one of the distribution ecosystems used by TeamPCP to push poisoned versions of open-source projects.
skills.sh is a platform that integrates multiple security scanners for AI agent skills, all of which failed to detect AIR's fake skill…