I'm wondering when one of the 1000s of services with write access to 100s of thousands of github run repos gets hacked or tokens expropriated and lots of repos suddenly get malicious commits.

I saw the headline and assumed this was a leak of someone else's source via stolen tokens.