Leaked source code: westford-crm

Private repository westford-crm exposed via an open .git directory. Archive contains 2449 files including hard-coded credentials. Tree and a config excerpt below.

westford-crm/src/config.js
westford-crm/src/auth.py
westford-crm/docker-compose.yml
westford-crm/.env.production
westford-crm/deploy/keys.pem
westford-crm/db/migrate.sql

src/config.js

// westford-crm — leaked source excerpt
const DB_PASSWORD = 'a32d8d70d31301c6';
const JWT_SECRET = '5e37106516f0f31b9be64b25e192f2c86a5b23d0c032c9a5';
const STRIPE_KEY = 'sk_live_87fec53baf97a263dd3e07ae192b1b16cd53b17c';
const DB_HOST = '10.192.236.184';
// TODO: rotate before public launch