Small red team script for injecting login interception code into existing WordPress plugins
-
Updated
Jul 7, 2025 - Python
#
script-injection
Here are 3 public repositories matching this topic...
Follows an untrusted GitHub Actions value after it leaves run:, through env:, with:, step outputs and into the called action, until it dies in argv, reaches a shell, spoofs GITHUB_OUTPUT, or becomes opaque with the reason named. An injection that moved is not an injection that was fixed.
python security static-analysis ci-cd script-injection taint-analysis devsecops github-actions supply-chain-security workflow-security
-
Updated
Sep 23, 2026 - Python
MCP server auditing .github/workflows/*.yml for supply-chain risks: script injection, leaked tokens, unpinned actions, broad permissions. Pay-per-event on Apify Store.
security workflow devops security-audit mcp static-analysis supply-chain audit ci-cd script-injection apify github-actions apify-actor anthropic model-context-protocol mcp-server fastmcp unbearable-techtips
-
Updated
Jun 11, 2026 - Python
Add this topic to your repo
To associate your repository with the script-injection topic, visit your repo's landing page and select "manage topics."