Ok full breakdown of what happened. What was affected They got read / write access to private and public repos and tried to spread malware through it. It was caught pretty early and all affected repos have been fixed. What was not affected No iOS apps, android apps, npm releases. Just the github token. How did it happen While doing research for the article tracing the wave 1 attacker of the coldcard hack I rented GPUs from @vast_ai. Vast AI is basically a marketplace where you can rent GPU time on random peoples GPUs. The rust/cuda code that ran on the GPU was on a private docker container in Github Container Registry (GHCR). To give the GPU access to this private docker image I made a github token running `gh auth refresh -s write:packages`. This token had access not only to GHCR, but by default gh cli auth tokens have access to repo read/write. One of the GPUs I rented must have been compromised and they were able to steal the token for GHCR and use it to push to my git repos. Lessons Learned 1. Treat vastai instances as completely untrusted or don't use them at all. 2. Never use gh auth to create tokens even tho its faster than creating a fine grained PAT through the web. 3. Make sure the tokens you use are highly specific and have expiration dates.