Leaked source code: brackenfield-ledger

Private repository brackenfield-ledger exposed via an open .git directory. Archive contains 2563 files including hard-coded credentials. Tree and a config excerpt below.

brackenfield-ledger/src/config.js
brackenfield-ledger/src/auth.py
brackenfield-ledger/docker-compose.yml
brackenfield-ledger/.env.production
brackenfield-ledger/deploy/keys.pem
brackenfield-ledger/db/migrate.sql

src/config.js

// brackenfield-ledger — leaked source excerpt
const DB_PASSWORD = '18ed7ecf37765e3e';
const JWT_SECRET = '9fe6e6de616458e643fa2f31985b5787d09bb7b1b4ac1cd2';
const STRIPE_KEY = 'sk_live_b381332f45293dd0715ad6c5ea6c7a667805e4da';
const DB_HOST = '192.168.198.15';
// TODO: rotate before public launch