HN Explorer

Ask HN: Did GitHub reset your account password and revoked all of your PAT?

3 points by stevematzal ↗ HN
Seems that many users got an email informing them that: "We’re writing to let you know that we observed suspicious activity that suggests a threat actor used a Personal Access Token (PAT) associated with your account to access private repository metadata."

2 comments

[ 3.2 ms ] story [ 16.9 ms ] thread
nstart
Yes. Still waiting for a reply from them on further audits + waiting for any kind of update from Travis since all the tokens that everyone has shared as affected have been related to Travis CI. This includes us as well.
stevematzal
I'm also waiting but for repo activity logs, in my case a PAT was "compromised" and reset by Github.