Suspicious 54% go Download

github.com/patxibocos/alexa-cycling-skill v0.0.0-20260723074849-3de6acb34e33

Unsafe GitHub Actions workflow pattern

pull_request_target checks out external PR headGitHub Actions run step references a secret
SHA-256162dabbb658c5c9ea4f8b11cf705259062ea3124f3dadadf8b90c596f77be820
URLhttps://proxy.golang.org/github.com/patxibocos/alexa-cycling-skill/@v/v0.0.0-20260723074849-3de6acb34e33.zip
MaleculeO(S)Md(Bk)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.