npm security update: Attack campaign using stolen OAuth tokens | The GitHub Blog
On April 15, we published a blog detailing an attack campaign utilizing stolen OAuth user tokens issued to two third-party GitHub.com integrators, Heroku and Travis CI. The npm organization on GitHub.com was impacted by this campaign and we have been actively investigating the impact of this atta…
もっと詳しく