1. 10
    Security alert: Attack campaign involving stolen OAuth user tokens issued to two third-party integrators security github.blog
    danielcompton avatar via danielcompton 4 months ago |
    Archive.org Archive.today Ghostarchive
    | 2 comments
  1. 4
    mperham avatar mperham 4 months ago | link
    1. Go here: https://github.com/settings/applications
    2. Revoke any OAuth app not critical.
    3. Find a GitHub app in the marketplace to replace anything critical.
    1. 1
      kghose avatar kghose 3 months ago | link

      Could have been CircleCI? because that was the one that said “Used in the past week.” and I hadn’t done anything that would have invoked CircleCI.