Stawinski: How We Executed a Critical Supply Chain Attack on PyTorch

The related December 2023 article, by another of the collaborators, linked from the article above, also has lots of good detail on the risks of persistent CI action runners that aren’t fully locked down:

https://adnanthekhan.com/2023/12/20/one-supply-chain-atta...

And includes a list of several projects where they found problems. Of which PyTorch was just the first in the list.

Ewen