ArtiPACKED: Hacking Giants Through a Race Condition in GitHub Actions Artifacts

Revival Hijack – PyPI hijack technique exploited in the wild, puts 22K packages at risk

Github Actions Exploitation: Dependabot

Race Condition About The User Version and Ignored

Beyond the Limit: Expanding single-packet race condition with a first sequence sync for breaking the 65,535 byte limit

GitHub Actions Exploitation: Self Hosted Runners