Security camera shipped with a GitHub admin token exposed on its login page

A researcher discovered that a Hanwha security camera had an active GitHub admin token embedded directly in its login page. The token potentially granted access to the manufacturer's code repositories. The finding highlights a serious supply-chain security flaw in IoT device firmware.