Plaintext credential storage
Named by 2 kept items in this workspace.
Search every workspace for Plaintext credential storage. It matches the name as written, so it can find other things that share it.
The items that name it 2
Once validated, the password is written in plaintext to a hidden file /tmp/.pass, later moved to the user's home directory
Long-term API keys stored in plaintext on local filesystem, often world-readable
All techniques in this workspace.