Weaponizing Dependabot: Pwn Request at its finest
GitHub bots like Dependabot might merge malicious code due to "Confused Deputy" attacks, escalating to command injection via crafted branch names. New TTPs reveal clever ways attackers exploit these issues...