logo

Database

Gemfury Token

Description

The source code repository contains sensitive information: Gemfury Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Gemfury Token patterns in source code and configuration files

Vulnerable code example

curl -F package=@pkg-0.0.1.tgz https://XReL3E-Jle7Qph4D5Y47PP6ANlUj41IJLN@push.fury.io/acme/
pip install mylib --extra-index-url https://J7Wl2-nPiCATX0yyyFjmCXPO37VRtfZ6:@pypi.fury.io/acme/
curl -F p1=@pkg.gem https://acme:bYJxH-OkuBsXxRUrb1Io9Pv5Hcd1kAD@push.fury.io/acme/
source "https://qGZMm-yv9UsCbQc8gdqrwCGI15L4BTh4Q@gem.fury.io/acme/"
//npm.fury.io/acme/:_authToken=HxQYz8-OLtjCOKETWfXXEIrj3dmGsajF
export FURY_TOKEN=HQ217R-ftBqJBGg5TMW5oHGPHYFBVlsW
      FURY_PUSH_TOKEN: "BQvSr-5vuDtEtDzyCBa1NRcnrKVjM7BmY"
GEMFURY_API_TOKEN='42RLS-OHDgnoxuO0IGtq6SespcWXd6'...