Stolen OAuth Tokens Allow Attacker to Breach 'Dozens' of GitHub Repos