The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.
Researchers have discovered a major security leak hiding in plain sight on the internet that could expose the personal data ...