Security News SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack TheHackerNews Daniel Bender 04 Apr 2025 Leaked SpotBugs PAT in November 2024 led to a GitHub supply chain attack, compromising Coinbase in March 2025.