---
id: 8787
title: "Binary secret scanning helped us prevent (what might have been) the worst supply chain attack you can imagine"
source_domain: jfrog.com
source_url: "https://jfrog.com/blog/leaked-pypi-secret-token-revealed-in-binary-preventing-suppy-chain-attack/"
published_at: "2024-07-09T00:00:00Z"
tags: ["supply-chain", "binary-analysis", "jfrog", "secret-scanning"]
phying_url: "https://phying.com/item/8787"
lang: en
---

# Binary secret scanning helped us prevent (what might have been) the worst supply chain attack you can imagine

## Summary

The JFrog Security Research team has recently discovered and reported a leaked access token with administrator access to Python’s, PyPI’s and Python Software Foundation’s GitHub repositories, which was leaked in a public Docker container hosted on Docker Hub. As a community service, the JFrog Security Research team continuously scans public repositories such as Docker Hub,…

## Intelligence Metadata

- **Sources:** jfrog.com
- **Published:** 2024-07-09T00:00:00Z
- **Original:** https://jfrog.com/blog/leaked-pypi-secret-token-revealed-in-binary-preventing-suppy-chain-attack/
- **Phying News:** https://phying.com/item/8787