GitHub supply chain security crisis escalates with new defenses

A wave of attacks (AgentBaiting, Miasma worm with genuine SLSA provenance, npm supply chain attacks) has prompted GitHub to ship nine controls including automatic hold on suspicious Actions runs. The crisis shows a 1,444% increase in supply chain attacks. Defenses are rolling out but network firewall remains in preview.