"Like, people are out there just raw dogging source code from random other open source developers, with their local environment running tokens that give
them access to everything they could possibly need from their Google account.

[...]

Jia Tan might have been a best case scenario for this community."

https://lists.aitelfoundation.org/archives/list/dailydave@lists.aitelfoundation.org/thread/P3R4OIKL7YGMJZIUCZJEZMQI425YTFDV/

@buherator I have similar worries regarding all those plug-ins modern editors have. because we're all too cool now to use a proper ide, and need like 500 semi maintained plug-ins from God knows whom, to get where eclipse and visualstudio were like 15 years ago.

I'm not innocent in all that, but there's close to zero awareness and I wonder how many corps have that stuff in their threat model (or even know it's going on).