**We wanted to use Baseten for inference, we got admin access to their GitHub**

**We wanted to use Baseten for inference, we got admin access to their GitHub**

> We gave Strix a domain. In 25 minutes, it found a live token with admin access to Baseten's product, deployment, and CLI repos in a public Docker image. We were about to trust Baseten with our own and our customers’ data. So to be safe, we ran Strix to ensure they were secure first. About 25 minutes later, it had a live GitHub admin token. We build Strix , an autonomous hacking agent, which of course means we need (c...

**来源信息**
- **来源**：Hacker News：AI 热帖
- **分类**：ai-products
- **发布时间**：2026-09-11 00:50（北京时间）
- **原文**：[打开原文](https://www.strix.ai/blog/baseten-harbor-github-pat-takeover)