Leaked source code: tangerine-api

Private repository tangerine-api exposed via an open .git directory. Archive contains 1968 files including hard-coded credentials. Tree and a config excerpt below.

tangerine-api/src/config.js
tangerine-api/src/auth.py
tangerine-api/docker-compose.yml
tangerine-api/.env.production
tangerine-api/deploy/keys.pem
tangerine-api/db/migrate.sql

src/config.js

// tangerine-api — leaked source excerpt
const DB_PASSWORD = 'eaa629ec478b72af';
const JWT_SECRET = '1afe631853a32dfc2b1155c8170962d69930420d72d06a5d';
const STRIPE_KEY = 'sk_live_b1b1a8214ca3ea60b173debc5c07f3fa073831b4';
const DB_HOST = '192.168.32.254';
// TODO: rotate before public launch