GITHUB ACTIONS VULNERABLE TO TYPOSQUATTING, EXPOSING DEVELOPERS TO HIDDEN MALICIOUS CODE

Summary from the TLDR InfoSec newsletter

Threat actors are exploiting typos in GitHub Actions to run malicious code by creating similar-sounding actions, compromising projects, and stealing sensitive information.