One Bad OAuth Scope Can Expose Your Whole Google Workspace

Google Apps Script makes it trivially easy to reach into Gmail, Drive, Sheets, and any Google Cloud API — which is exactly the …

source