With this #GitHub runner vulnerability in place, dependencies could have been tampered with and malicious payloads injected into the built software. Any software built with these runners since the #eMudhra was made public and until the runners are fixed must be considered compromised. https://infosec.exchange/@yossarian/117516807638615410