Supply Chain Attack: GitHub Actions compromise led to malicious PyPI release of elementary-data

A recent incident shows how CI/CD pipelines are increasingly becoming a target in supply chain attacks. The elementary-data package on PyPI was compromised after an attacker exploited a GitHub Actions vulnerability to push a forged release without modifying the source code. The malicious version emb