10 votes

Twilio's TaskRouter JavaScript SDK was in a world-writeable S3 bucket, and had what appears to be a precursor to a payment-card skimmer inserted for about 12 hours