And that is coming back to bite everyone in the ass:
https://arstechnica.com/security/2024/05/0-click-gitlab-hija...