Security News SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack TheHackerNews Daniel Bender Apr 4, 2025 Leaked SpotBugs PAT in November 2024 led to a GitHub supply chain attack, compromising Coinbase in March 2025.