Baldur Bjarnason

... works as a web developer in Hveragerði, Iceland, and writes about the web, digital publishing, and web/product development

These are his notes

“Backdoored developer tool that stole credentials escaped notice for 3 months - Ars Technica”

This is potentially a huge breach that might affect a lot of companies and developers.