Attackers don't just guess your passwords. They scrape GitHub repositories and...

https://reportz.io/technology/password-manager-account-takeover-can-search-exposure-help-attackers/

Attackers don't just guess your passwords. They scrape GitHub repositories and LinkedIn profiles to build perfect profiles of your infrastructure. When you leave SSH configs or API keys exposed in public repos, you hand hackers the keys to your kingdom