In FossHub statement on reddit they said that they think they got credentials that were saved inside Redis through probably a zero day exploit. Probably something to be verified
Damn. You have no idea how close I was to reinstalling Audacity last night.
Downloaded it a couple days ago in my case! Close call, though I do backup my important files offsite.
I keep two offsite backups!
It sounds to me like one or two people reused passwords between fosshub and some other site that had its database breached.