Clone2Leak: Your Git Credentials Belong To Us

So, cloning a malicious repository on GitHub Codespaces using GitHub CLI will always leak the access token to the attacker’s hosts.

baha