2026-03-02 UTC
# 
[artlung] Extraordinarily interesting attacks. The “branch name is the exploit” is insidious and brilliant. https://www.stepsecurity.io/blog/hackerbot-claw-github-actions-exploitation … obviously any automated builds and particularly automated merges need vetting