GitHub private repo accessed, deleted; logs leave no trace.
‼️ A GitHub user with no membership, invite or role at Dodo Payments deleted one of its private repos, co-founder Ayush Agarwal says.
The audit log he shared shows a single repo.destroy from the GitHub CLI.
It is missing from deleted repositories, so he cannot restore it. https://t.co/qT1z8IH4Ii
— International Cyber Digest (@IntCyberDigest) October 27, 2026
someone outside our GitHub org deleted one of our private repos.
no membership or invite or role. nothing in our org or enterprise audit logs gave them access. just one repo.destroy from the gh CLI.
and it's not in deleted repositories, so no restore.
@github how is this possible, what sorcery is this?
— Ayush Agarwal (@ayushagarwal) October 27, 2026