As per the latest update by the developers, the attacker compromised a GitHub personal access token (PAT) used by a bot (@tj-actions-bot), which had privileged access to the tool's repository. However ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results