Comment on Supply chain attack alert: .github/setup.jsComments−nikita22063moDid you dig anything on where it came from for you? Some NPM package?−antiheroOP3moWe're trying to figure this out, we've nailed it to the developer machine but not sure how that machine got infected. Possibly through GHA.
Comments
Did you dig anything on where it came from for you? Some NPM package?
We're trying to figure this out, we've nailed it to the developer machine but not sure how that machine got infected. Possibly through GHA.