GitHub repository: JamiesWhiteShirt/suspicious-package
Primary language: JavaScript
Description: A malicious npm package that exploits the default configuration of GitHub Actions and actions/checkout to write unexpected comments on pull requests