Leaked GitHub Python Token
ID: 1a81306f-1baa-5595-b576-c2fb9d2f8b16
STIX ID: report--1a81306f-1baa-5595-b576-c2fb9d2f8b16
Feed Name: Schneier on Security
Threat Score
A publicly exposed GitHub Personal Access Token was discovered inside a Docker Hub container that would have granted administrator access to Python, the Python Package Index (PyPI), and Python Software Foundation repositories; researchers warned this could have enabled supply-chain attacks (for example, injecting malicious code into CPython) although there is no public evidence the token was abused.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.