BINARY SECRET SCANNING HELPED US PREVENT (WHAT MIGHT HAVE BEEN) THE WORST SUPPLY CHAIN ATTACK YOU CAN IMAGINE

Summary from the TLDR InfoSec newsletter

The JFrog Security Research team found a leaked access token with administrator access to important Python repositories, preventing a potential supply chain attack. The leaked secret was identified in a Docker container, highlighting the importance of scanning for secrets in both source code and binary files. PyPI's quick response to revoke the leaked token (within 17 minutes) highlights the importance of acting swiftly when leaks are discovered.