TensorFlow CI/CD Flaw Exposed Supply Chain to Poisoning Attacks

Researchers found misconfigurations in TensorFlow's CI/CD (self-hosted GitHub Actions runners and overly permissive GITHUB_TOKEN/AWS_PYPI_ACCOUNT_TOKEN usage) that could be abused via malicious pull requests to gain remote code execution on runners, steal tokens, upload malicious GitHub releases, or publish poisoned PyPI packages; maintainers remediated the issues by requiring approval for forked PR workflows and restricting token permissions.