#typescript
The GitHub Actions Checkout action lets you download your repository code into the workflow environment so your automation can access it. It supports fetching specific branches, tags, or commits, and can fetch full history or just the latest commit. You can use tokens or SSH keys for authenticated access, enabling secure git commands during workflows. It also supports sparse checkouts to fetch only parts of the repo, and can handle submodules. This action simplifies automating tasks like testing, building, or deploying code by ensuring your workflow has the right code checked out efficiently and securely.
https://github.com/actions/checkout
🚨 Fake VS Code extension abused #Moltbot’s name to deliver remote access malware.
It posed as an AI assistant, despite Moltbot having no official VS Code plugin. Once installed, it auto-ran on IDE launch and dropped ScreenConnect for persistent remote control.
🔗 Read → https://thehackernews.com/2026/01/fake-moltbot-ai-coding-assistant-on-vs.html
#typescript#ai#assistant#clawd#crustacean#moltbot#molty#own_your_data#personal
Moltbot is your personal AI assistant that runs on your devices like Mac, Linux, or Windows. It chats on WhatsApp, Telegram, Slack, Discord, and more, with voice on phones and live visuals. Install easily with `npm install -g moltbot@latest` then `moltbot onboard`. Use top models like Claude Opus for smart replies. It remembers talks, runs tasks, sends reminders, and builds skills itself. You gain a fast, private helper that acts first—handling emails, calendars, and chores proactively to save time and boost productivity every day.
https://github.com/moltbot/moltbot