Coordinated GitHub API enumeration and access token abuse
MentionsGitHub
Datadog Security Research has tracked multiple coordinated campaigns enumerating GitHub organizations, repositories, and users through the public GitHub API, abusing leaked access tokens, and cloning private repositories.
Summary from Datadog Security Labs.