'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
We haven't written up this one. Dark Reading has the full story — the link below goes straight to it.