GitHub Personal Access Tokens
Named by 4 kept items in this workspace.
Search every workspace for GitHub Personal Access Tokens. It matches the name as written, so it can find other things that share it.
The items that name it 4
ghp_ (classic) and github_pat_ (fine-grained) tokens harvested by the payload, enabling repository read/write and further workflow injection.
exposed PAT led to cloud compromise in April 2026
Fine-grained PATs, classic PATs (with and without SAML SSO), and Enterprise Managed Users (EMU) tokens compromised and used for unauthorized repository access
All technologies in this workspace.