build1 publisher
Strix's agent read Baseten's image config and found a live GitHub admin token from March 2023
The credential was in history[].created_by, expanded there by a RUN command that took a build argument, inside a Harbor project anyone could pull anonymously. Baseten rotated it about 17 hours after the disclosure email.
Publishers:dev.to
Reality
- Evidence62
- Adoption35
- Hype gap+22
- Incentives60
- Confidence55