The GitHub Blog company blog
Attack campaign involving stolen OAuth tokens issued to third-party integrators
On April 12, GitHub Security began an investigation that uncovered evidence that an attacker abused stolen OAuth user tokens issued to two third-party OAuth integrators, Heroku and Travis-CI, to download data from dozens of organizations, including npm. Read on to learn more about the impact to GitHub, npm, and our…
- Points
- 281
- HN comments
- 67
- Submissions
- 1
- Cited by
- 9 commenters
Security & PrivacyTech Industry & Business2022
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Apr 15, 2022 | Attack campaign involving stolen OAuth tokens issued to third-party integrators by heyoni | 281 | 67 |
Cited in comments
Linked from 9 Hacker News comments by 9 different people, from Apr 2022 to Mar 2023.
Most recent:
- doodlesdev · Mar 6, 2023
- tln · May 27, 2022
- chii · May 5, 2022
- maryjpenny · Apr 29, 2022
- MilnerRoute · Apr 17, 2022
- dangoor · Apr 16, 2022
