Leaked package registry credentials pose a significant security risk. Learn how GitHub is working to protect developers and open source software.
https://github.blog/2021-06-08-securing-open-source-supply-chain-scanning-package-registry-credentials/

https://twitter.com/github/status/1412146774500950020