ClockworkPi, creator of a few different open-source hardware kits, published their apt repo's private key to GitHub on May 21.

The kicker? The dev has NO idea how bad this is.

https://github.com/clockworkpi/apt (Image if thread is deleted) https://imgur.com/nGMFrPT