Exposed GitLab project email addresses let attackers push code

Private GitLab email addresses intended for developers to push issues or tasks are being actively exploited after being inadvertently exposed in public documentation and README files. Attackers can leverage these addresses to inject unauthorized code commits directly into repositories. Developers should immediately reset these project email tokens and audit their repositories for suspicious commit history.