The compromised action could impact thousands of CI pipelines, the report said. GitHub pulled access to the tool by March 16 and replaced it with a patched version.

PyPI, a vital repository for open source developers, temporarily halted new project creation and new user registration following an onslaught of package uploads that executed malicious code on any ...