The move comes after threat actors compromised developers’ accounts