Post

Seth Larson
@sethmlarson.dev

Legitimate supply-chain attack affecting Python package "Ultralytics" abused multiple levels of GitHub Actions shell injection vulnerabilities in workflows to publish malware to PyPI.

7 reposts17 likes

blackbigswan
@blackbigswan.bsky.social

It's also an arbitrary user input attack through the Github Action. And that's somehow even more interesting because it got triggered without the maintainers action (Original PR with malicious string for a branch name was closed instantly by the CI). There's potentially more vulnerable actions.