Unauthorised CocoaPods Auth via Token Leakage & HTTP Header Injection Snowplow disclosed a bug submitted by reefspek: https://hackerone.com/reports/2228086 [Source]