[softawre]

The article does say:

> that they were exposed for “several months.”

[lucb1e]

Same as Github it seems.

I wonder what library was used, and which other companies use it which hasn't told their users. That'd let us know who isn't as transparent...