Slow Mist: Grafana recently suspected of being attacked

PANews reported on April 27 that 23pds, the Chief Information Security Officer of Slow Fog Technology, stated on the X platform that the open source data visualization tool Grafana has recently been suspected of being attacked. The attacker used Gato-X to steal confidential signatures and attacked multiple code repositories with App tokens. This workflow has a potentially related application Private Key, and it is suspected that the attacker used carefully designed branch names to inject JavaScript code and steal confidential information.