Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.
A configuration in Codex Cloud Environments lets thousands of colleagues see repository names and activity linked to ChatGPT accounts.