The threat actor orchestrating the sophisticated "GhostAction" supply chain attacks has significantly evolved their tactics, moving beyond the automated injection of malicious GitHub Actions workflows. […]