But even more alarming is that this GitHub token gives complete admin access to the GitHub account, exposing all private repositories and giving complete access to the framework’s website.

An attacker used the leaked token on August 28th to create a new site-admin account and log into the admin dashboard of the company's website, Sourcegraph.com, two days later.

Intruder, a leader in attack surface management, has launched Autoswagger—a free, open-source tool that scans ...