I never authorized an integration that scans my secrets

Home Assistant developers are investigating a security incident where a user reported that their account was compromised due to an unauthorized integration with a secrets manager. The user claims they never authorized the integration, and the issue has been opened on the Home Assistant GitHub repository. The user suspects that the incident may be related to an older version of the integration that had a bug that allowed unauthorized access.