A little more than a year ago, on a trip to Nairobi, Kenya, some colleagues and I met a 12-year-old Masai boy named Richard Turere, who told us a fascinating story. His family raises livestock on the ...

The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...