Researchers identified nearly 10,000 websites where API keys could be found, exposing details that could let attackers access ...
The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.