News for hackers. Stuff that matters.
Re:Postmortem: TanStack npm supply-chain compromise by qudat on Monday May 11, 2026 @11:10PM (#48103742)
And a labeling action which requires `pull_request_target`: https://github.com/actions/labeler#create-workflow

These types of features are not worth it and need to be removed from the marketplace.

There are no comments on this comment yet.