Disclosures initiated by JFrog, via Secrets Detection scanning public artifacts Company 1 - Full admin access to entire codebase incl. pipeline code Company 2 - Leaked GitHub token allowing read access to ~320 private repos and write to ~160 + Slack token with full capabilities Full PII leakage for 10000+ employees, ability to read full Slack history Company 3 - SSH keys to production machines, AWS DB passwords Company 4 - npm package leaked GH admin token for 7 private repos Company 5 - Leaked AWS S3 token, giving access to 100’s of buckets