This post highlights the recently disclosed "Insertion of Sensitive Information" vulnerability, which affects Gradle's plugin-publish plugin.