Attackers abused GitHub Actions workflows to siphon off thousands of credentials from hundreds of npm and PyPI repositories.

British racing has been handed its most detailed picture yet of how fans and potential customers view the sport.