TL;DR: Credential harvesting is the large-scale collection of valid credentials that lets attackers log in as legitimate users. Developer machines are an especially rich source: unlike phishing, the credentials already sit in plaintext on disk, so no one needs to be tricked. Case in point: cred...
Source: [Dev.to](https://dev.to/gitguardian/credential-harvesting-explained-how-attackers-collect-secrets-from-developer-machines-56bc)