Comment by amouat

Isn't that exactly what they did? The bots could only access the jfrog instance, so they hacked jfrog?