Viewing profile — jamesberthoty

Several individual developers seem to have noticed it at around the same time with Step and Socket pointing to different people in their blogs. And then vendors from Socket, Aikido…

A lot of blogs on this are AI generated and such as this is developing, so just linking to a bunch of resources out there: Socket: - Sep 15 (First post on breach): https://socket.d…

Does this seem like a plausible summary? 1. tj-actions-bot PAT spoofs renovatebot commit with malicious code - probably by creating a new unprotected branch, pushing to it spoofing…

An easy way to get started testing the security scanning capabilities of OpenAI