Preliminary research
Thousands of Live Secrets Found Across Four Cloud Development Environments
AI-collected research leads through 2 October 2026, including bounded month-by-month reviews of selected social and community sources from March through September. Unranked, incomplete, not community-vetted, and subject to change.
Measures credential exposure across 22 million public projects on CodeSandbox, StackBlitz, CodePen and JSFiddle using platform-specific enumeration and TruffleHog verification. The scan found 8,792 unique live secrets, including high-impact repository and cloud credentials, and discusses large-scale triage and responsible disclosure.
Record
- Researcher
- Ben Zimmermann
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Ben Zimmermann, first published at the original source. Preserved copies are kept so the citation survives its host.