[everyos_]

This is why we can't have nice things. I sure hope this doesn't result in GH disabling actions for everyone.

Also somebody should Ghidra the project, see if they can find malware. I'm not saying anyone has to, just a thought

[keepamovin]

You are free not to run binaries you don’t trust. You are not free to launder a malware accusation through innuendo.

"This is why we can’t have nice things" assumes incorrectly: truth is ghost uses your own Actions minutes, for your own workflows/ghost boxes, on your own GH account, accessible only by your own SSH identity. I reject your mistaken frame.