The Stealth GitHub Actions Attack Infiltrating 250+ AI Agent Repos
Picture this: a innocent-looking PR promising CI magic slips into your repo, only to phone home with your deepest GitHub secrets. That's the nightmare hitting MCP projects right now.
#oidc-tokens