Elementary Data's open source CLI was the victim, and v0.23.3 is not a version you want installed.
  • Gamma ( GammaGames@beehaw.org ) English
    5·
    6 months ago

    [The action] was set up in a way where text from a PR comment could be passed directly into a shell command, so whatever the comment said, the runner would execute it.

    Oh, lol