Maliciously crafted GitHub branch name embeds crypto miner into a released package (via equeue) — discussion
#security
