Should we tighten up security in all repos in the project?

Prof. Victor Lazzarini
Maynooth University
Ireland

> On 8 Jul 2026, at 01:57, Steven Yi  wrote:
>
> 
> Hi All,
>
> FYI: I found that a series of commits made to the web-ide project yesterday were attributed to my account, but I did not author them. They were clearly malicious, attempting to read secrets from the project. I revoked access tokens and ssh keys, and then force-pushed to remove the offending commits. Branch protection rules are now in place for web-ide.
>
> I'm unsure if the breach involved an old access token, an SSH key, or was just a commit spoof. I think I've taken the necessary steps to prevent further issues, but if you see any strange commits attributed to my account, please let me know.
>
> Thanks,
> Steven
The information contained in this email may be confidential and privileged. It is intended only for the addressee(s) stated above. If you are not an addressee any use, dissemination, distribution, publication or copying of the information contained in this email is strictly prohibited. If you have received this email in error, please immediately notify us by email at dataprotection@mu.ie and delete this email from your system.

Please note that Maynooth University is subject to Freedom of Information and Data Protection laws. We may be required to disclose the content of emails under the FOI Act 2014, the Data Protection Act 2018 or GDPR.

Is don seolaí / do na seolaithe thuasluaite amháin an ríomhphost seo. D’fhéadfadh an t-eolas atá ann a bheith rúnda agus faoi phribhléid. Mura seolaí tú, tá cosc iomlán ar aon eolas atá sa ríomhphost seo a úsáid, a scaipeadh, a dháileadh, a fhoilsiú nó a chóipeáil. Má fuair tú an ríomhphost seo trí thimpiste, cuir sin in iúl dúinn láithreach trí ríomhphost a chur chuig  dataprotection@mu.ie  agus scrios an ríomhphost seo ó do chóras.

Tabhair faoi deara go bhfuil Ollscoil Mhá Nuad faoi réir dhlíthe um Shaoráil Faisnéise agus um Chosaint Sonraí. D’fhéadfadh ceangal a bheith orainn ábhar ríomhphoist a nochtadh faoin Acht um Shaoráil Faisnéise 2014, faoin Acht um Chosaint Sonraí 2018 nó faoi GDPR.

Registered charity number 20037130