PWNING THE ENTIRE NIX ECOSYSTEM

Summary from the TLDR Dev newsletter

Researchers found and reported two vulnerabilities in Nixpkgs GitHub Actions related to pull request targets that allowed potential code injection and unauthorized access via command injection and local file inclusion - they were quickly fixed by maintainers.