Unverified55% confidenceFactExact time
2022年，GitHub曾披露攻击者利用被盗的OAuth令牌访问了多个组织的私有仓库，影响了包括npm在内的多个重要项目
1
Sources
55%
Confidence
Long-term
Relevance
5/20/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSecurity researchers disclosed an attack method targeting GitHub AI agents, codenamed GitLost, which tricks the GitHub AI assistant into leaking the contents of private code repositories through prompt injection.74% similarUnverified2023年研究人员证明通过精心构造的GitHub README文件可以劫持Copilot等AI编程工具，促使其向外部服务器泄露代码片段68% similarUnverifiedGitHub从2023年起对所有活跃账号强制要求启用双因素认证（2FA），背景是软件供应链攻击的持续上升67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/6988API
curl https://kongchang.com/api/v1/knowledge/claims/6988MCP
get_claim(id=6988)