Tech »  A carefully crafted branch name can steal your GitHub authentication token