
compromised supply chain: the injection into GitHub Actions that turned a PR into a malicious release of elementary-data
A very used package in the dbt ecosystem, elementary-data, was compromised in PyPI and in the project's container record after a malicious actor managed to inject code into the pr…







