Leaked source code: larkspur-ml

Private repository larkspur-ml exposed via an open .git directory. Archive contains 2126 files including hard-coded credentials. Tree and a config excerpt below.

larkspur-ml/src/config.js
larkspur-ml/src/auth.py
larkspur-ml/docker-compose.yml
larkspur-ml/.env.production
larkspur-ml/deploy/keys.pem
larkspur-ml/db/migrate.sql

src/config.js

// larkspur-ml — leaked source excerpt
const DB_PASSWORD = '3a21cd888be7693c';
const JWT_SECRET = '120805e48167359ad6395c1aafcddc64894994ee805f9fd0';
const STRIPE_KEY = 'sk_live_6706ea00fc7e04141b05b1e643edb05d6e86dab5';
const DB_HOST = '172.26.184.173';
// TODO: rotate before public launch