A cascading supply chain attack on GitHub that targeted Coinbase in March has now been traced back to a single token stolen ...