2023 Orca Security — accidental exposure of a GitHub token could have enabled private repository access
Data compromised
Private repository content accessible with the exposed credential until revoked.
Technical writeup
Orca Security published a notice that a developer-related mistake exposed a GitHub token and described containment/rotation steps; trade press summarized repository exposure risk.
Root cause
Credential leakage via accidental publication of a sensitive token (per vendor blog).