GitHub

GitHub

public 3 min read
A sophisticated typosquatting attack targeted GitHub via a malicious npm package ‘@acitons/artifact’ (mimicking the legitimate ‘@actions/artifact’), accumulating 206,…