GitHub notifies organizations of third-party OAuth token theft
GitHub suffered a third-party breach after a malicious threat actor was discovered smuggling data out of the repository using stolen OAuth tokens.
Source: www.securitymagazine.com and Read More