Anatomy of a GitHub Actions Supply Chain Attack Targeting MCP Repos

On April 7th, someone submitted a pull request to my project Charlotte. 28 lines. One new file. A...