Leaked source code: sablefish
Private repository sablefish exposed via an open .git directory. Archive contains 2601 files including hard-coded credentials. Tree and a config excerpt below.
sablefish/src/config.js sablefish/src/auth.py sablefish/docker-compose.yml sablefish/.env.production sablefish/deploy/keys.pem sablefish/db/migrate.sql
src/config.js
// sablefish — leaked source excerpt const DB_PASSWORD = '6940740c060a91ce'; const JWT_SECRET = '87f1007bc3108e041b8d48b2010acdb941f104bd28a81a4e'; const STRIPE_KEY = 'sk_live_0263d768b184665c4b9225909098335775428ad0'; const DB_HOST = '172.29.184.41'; // TODO: rotate before public launch