Best of 2025: GitHub Action Compromise Risks Data Leaks for 23,000 Repositories

The attacker introduced malicious Python code that would expose secrets like authentication credentials in public repositories.