Topic

Source code leaks

Incidents in which a company's private repositories are copied and published, exposing internal logic, configuration and any secrets committed alongside the code.

Current clusters

security1 publisher

Attacker copied 170 CrowdSec repositories with a departed employee's still-live GitHub token

CrowdSec kept a leaver's GitHub access open so he could finish some work, his laptop was hit by the TanStack npm compromise on May 11, and the repositories were copied on May 22 and posted to a forum on September 16.

Publishers:thehackernews.com

Reality

Evidence56
Adoption70
Hype gap+22
Incentives74
Confidence55