logo

Database

Modelscope Api Key

Description

The source code repository contains sensitive information: ModelScope API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches ModelScope API Key patterns in source code and configuration files

Vulnerable code example

MODELSCOPE_API_TOKEN=ms-41e951a0-02cb-48fc-bba3-5151f05729d2
export MODELSCOPE_API_KEY="ms-b63e9ba7-f1fc-44c9-9dc7-6f3c60ffd5ac"
modelscope login --token ms-e75ffc95-b032-440d-9238-1ecb7ceebfda
client = OpenAI(base_url="https://api-inference.modelscope.cn/v1", api_key="ms-72e2c09f-6ca8-49e4-92bc-261ff1020ee3")
curl https://www.modelscope.cn/openapi/v1/users/me -H 'Authorization: Bearer ms-f4f24b6f-c486-44d5-b3c9-db3940154a4e'