Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
0 results for “OAuth token”
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
Attackers exploited a compromised OAuth token from a former CrowdSec employee's machine—initially compromised via the TanStack npm supply chain attack—to steal 170 private GitHub repositories.
Sep 23, 2026
Twitch extension with 30K installs exposes users’ OAuth tokens
A publicly available Twitch browser extension with 30,000+ installs exfiltrates users’ OAuth session tokens to a third-party commercial bot service, creating immediate account takeover risk.
Sep 15, 2026
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
A malicious Twitch browser extension named 'Twitch Enhanced Viewer | JeetBot' leaked OAuth tokens from nearly 31,000 users to proxy servers run by a Russian commercial bot service.
Sep 14, 2026
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
Attackers are using dormant GitHub accounts and compromised credentials to map corporate software assets at scale, posing a stealthy reconnaissance threat to enterprise code repositories.
Jul 10, 2026