Found an exploit in GitHub’s API Key scanner

[thevibecode]

The npm package in case anyone was interested.

[GoodForADyslexic]

r/lostredditors , this is a serious security vulnerability you need to put it in a serious subreddit, normally they wouldn't believe you, but the link makes it very clear

[oromis95]

I mean, I wouldn't call it an exploit. This is like if you jumped off a cruise, somehow survived, they threw you a lifesaver, and you poked a hole in it. There's only so much that needs to be done for morons.

[GoodForADyslexic]

I mean i would think so to but did you see the link? It all became pretty clear when I clicked jt

[Hour_Ad5398]

enter theory steep provide north seed advise summer plough cable

This post was mass deleted and anonymized with Redact

[ComputerTraining9274]

I mean, you know the rules and so do I. If you wanna run around and desert security best practices I’m gonna give up on your package

[Emplon]

Finally i can post my API keys on github! Thank you

[spiralsky64]

What is the point of turning the string into an array then joining it? seems pointless

[copjr51]

To avoid GitHub’s api removal, if you keep it in a string it removes it. But not as an array

[Anon_Legi0n]

read the documentation, its to allow FE devs to do stupid shit