Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.

GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.

Sequel is a simple, flexible, and powerful SQL database access toolkit for Ruby. Sequel provides thread safety, connection pooling and a concise DSL for constructing SQL queries and table schemas.