[Csnd-dev] FYI: Security Issue on Github with my account

--00000000000029589806560efd72
Content-Type: text/plain; charset="UTF-8"

Hi All,

FYI: I found that a series of commits made to the web-ide project yesterday
were attributed to my account, but I did not author them. They were clearly
malicious, attempting to read secrets from the project. I revoked access
tokens and ssh keys, and then force-pushed to remove the offending commits.
Branch protection rules are now in place for web-ide.

I'm unsure if the breach involved an old access token, an SSH key, or was
just a commit spoof. I think I've taken the necessary steps to prevent
further issues, but if you see any strange commits attributed to my
account, please let me know.

Thanks,
Steven

--00000000000029589806560efd72
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi All,<br><br>FYI: I found that a series of commits made =
to the web-ide project yesterday were attributed to my account, but I did n=
ot author them. They were clearly malicious, attempting to read secrets fro=
m the project. I revoked access tokens=C2=A0and ssh keys, and then force-pu=
shed to remove the offending commits. Branch protection rules are now in pl=
ace for web-ide.<br><br>I&#39;m unsure if the breach involved an old access=
 token, an SSH key, or was just a commit spoof. I think I&#39;ve taken the =
necessary steps to prevent further issues, but if you see any strange commi=
ts attributed=C2=A0to my account, please let me know.=C2=A0<br><br>Thanks,<=
br>Steven=C2=A0</div>

--00000000000029589806560efd72--