Most (77) of the malicious items were published during a 43-minute time span on September 1, with the remaining six occurring within the next two minutes. https://www.theregister.com/security/2026/10/29/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour/5306153