Token leak for full access to the project's GitHub repositories.
Researchers from JFrog discovered an admin access token to Python repositories, PyPI, and the Python Software Foundation on GitHub within the Docker image 'cabotage-app'. The token was found in the binary file '__pycache__/build.cpython-311.pyc' containing cached compiled bytecode. According to representatives from the PyPI repository, the token was created in 2023 for developer ewdurbin (Ee Durbin), who holds […]
