Software supply chain malware keeps targeting secrets on developer workstations. In this article I explain how to find workstations carrying dangerous secrets using a combination of Fleet/osquery and bagel.