Attack on GitHub that leaked private repositories and access to the NPM infrastructure
GitHub warned users of an attack aimed at downloading data from private repositories using compromised OAuth tokens generated for the Heroku and Travis-CI services. It is reported that during the attack, data was leaked from the private repositories of some organizations, which opened access to repositories for the Heroku PaaS platform and the Travis-CI continuous integration system. Among the victims was GitHub and […]