Leaked source code: cobalt-gateway

Private repository cobalt-gateway exposed via an open .git directory. Archive contains 1059 files including hard-coded credentials. Tree and a config excerpt below.

cobalt-gateway/src/config.js
cobalt-gateway/src/auth.py
cobalt-gateway/docker-compose.yml
cobalt-gateway/.env.production
cobalt-gateway/deploy/keys.pem
cobalt-gateway/db/migrate.sql

src/config.js

// cobalt-gateway — leaked source excerpt
const DB_PASSWORD = '88b8d2b18bb1998b';
const JWT_SECRET = '48fd281e806d090332b0422180c4ea5403037be5e98b1c34';
const STRIPE_KEY = 'sk_live_f7aa2246f47baafa733cf367bf0d2a7e532a68c2';
const DB_HOST = '172.22.28.131';
// TODO: rotate before public launch