Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials

A GitHub Actions workflow, actions-cool/issues-helper, was compromised through an imposter commit attack, allowing threat actors to steal CI/CD credentials from running workflows. The attack leveraged malicious code inje…