That massive GitHub supply chain attack? It all started with a stolen SpotBugs token

GitMCP: Transforms any GitHub project into an MCP endpoint

Show HN: GitMCP is an automatic MCP server for every GitHub repo

Recent GitHub supply chain attack traced to leaked SpotBugs token