anjanesh I don't know the details but my understanding of this incident is that the server itself was compromised, not git or a specific git account.

We manage the servers that host your repos at Opalstack. If you have repos at Github etc then someone else is managing those servers for you. Either way, you're trusting a provider to mitigate this sort of risk for you.

This was a high-profile incident, but servers all over the world are compromised every day. I wouldn't think about switching providers unless I had some specific security concern.

Mastodon