TensorFlow CI/CD Flaw Exposed Supply Chain to Poisoning Attacks

Continuous integration and continuous delivery (CI/CD) misconfigurations discovered in the open-source TensorFlow machine learning framework could have been exploited to orchestrate supply chain attacks.
The misconfigurations could be abused by an attacker to "conduct a supply chain compromise of TensorFlow releases on GitHub and PyPi by compromising TensorFlow's build agents via

attacker attacks build compromise continuous continuous delivery continuous integration delivery exploited exposed flaw framework github integration machine machine learning misconfigurations poisoning poisoning attacks pypi releases supply supply chain supply chain attacks supply chain compromise tensorflow