4 ms·

FYI looks like the stolen Heroku OAuth tokens are already being used: https://github.blog/2022-04-15-security-alert-stolen-oauth-user-tokens/ https://github.bl

• jsmeaton 5y ago
  Both heroku and travisci were affected? I wonder if and what the common vector would be for two major providers to lose their OAuth tokens.
  • andrelaszlo 5y ago
    - Heroku might be using Travis? - They were compromise independently but the hackers decided to start leveraging them at the same time to get the most out of them? - The obvious common denominator: Github? It doesn't make a lot of sense though.