Automated attack abuses GitHub Actions to mine cryptocurrency

But, an action is not required by the maintainer of the legitimate project for the attack to succeed. BleepingComputer also observed the malicious code ...