Researchers have demonstrated how threat actors can abuse the GitHub Codespaces ... script to forward a port, run a Python HTTP server, and download malicious files inside their Codespace.

The threat actor has been using several tactics, techniques, and procedures (TTPs) over the years, including hijacking GitHub accounts, distributing malicious Python packages, using a fake Python ...