GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking SignaturesThe Hacker News·Jul 8, 11:51 UTC · Jul 8, 2026Advisory130