AsyncAPI Supply Chain Compromise via GitHub Actions | Hacker News Reader