Amazon Web Services (AWS) is asking those that write code and use GitHub to go back and check their work to make sure they didn't forget to remove login credentials.

The pull request A threat actor was able to exploit an inappropriately scoped GitHub token in the managed AWS CodeBuild development tool, and with that, commit malicious code into the extension's ...