Leaked source code: cindermark-search

Private repository cindermark-search exposed via an open .git directory. Archive contains 2170 files including hard-coded credentials. Tree and a config excerpt below.

cindermark-search/src/config.js
cindermark-search/src/auth.py
cindermark-search/docker-compose.yml
cindermark-search/.env.production
cindermark-search/deploy/keys.pem
cindermark-search/db/migrate.sql

src/config.js

// cindermark-search — leaked source excerpt
const DB_PASSWORD = 'ea1c1135295e00ea';
const JWT_SECRET = '483bcce5cf35fe78c8d929230aad1473a5b04052565f1135';
const STRIPE_KEY = 'sk_live_3d1aa2378279cb3166c86d85e55eafe29c9b8665';
const DB_HOST = '172.31.172.77';
// TODO: rotate before public launch