Browse millions of secrets leaked in GitHub/NPM via Forager

#1

Post by zricethezav » Wed, Jul 19, 2023, 5:31 PM UTC

Browse millions of secrets leaked in GitHub/NPM via Forager
trufflesecurity.com

Re: Browse millions of secrets leaked in GitHub/NPM via Forager

#2

Post by Alifatisk » Wed, Jul 19, 2023, 5:53 PM UTC

This reminds me of shhgit (github.com/eth0izzle/shhgit) which runned a similar service!

Re: Browse millions of secrets leaked in GitHub/NPM via Forager

#3

Post by ziltoid_omni » Wed, Jul 19, 2023, 6:01 PM UTC

Wow, 0.1% of pushes containing secrets is shockingly high

Re: Browse millions of secrets leaked in GitHub/NPM via Forager

#4

Post by [deleted] » Wed, Jul 19, 2023, 6:19 PM UTC

ziltoid_omni wrote: post #3

Wow, 0.1% of pushes containing secrets is shockingly high

[deleted]

Re: Browse millions of secrets leaked in GitHub/NPM via Forager

#5

Post by zricethezav » Wed, Jul 19, 2023, 6:45 PM UTC

ziltoid_omni wrote: post #3

Wow, 0.1% of pushes containing secrets is shockingly high

Agreed! 1/1000 is pretty frequent considering how many pushes to GitHub happen every single day. Folks probably get a false sense of security thinking no one is looking at their personal repos (spoiler alert... they are!)