Actions

Stolen tokens, a sync-check workflow, secrets printed in base32 so GitHub masking cannot catch them. Over 13,500 planted branches. Private repos still bleed.