ANYONE CAN ACCESS DELETED AND PRIVATE REPOSITORY DATA ON GITHUB

Summary from the TLDR Web Dev newsletter

Truffle Security found a huge security flaw on GitHub where deleted and private repository data can be accessed by anyone. The issue is due to GitHub's repository network architecture, which allows forks to retain access to commit data even after the original repository is deleted or its visibility is changed. This vulnerability allows attackers to potentially access sensitive information like API keys and private code.