Skip to content

Credential and secret exfiltration

Named by 2 kept items in this workspace.

Search every workspace for Credential and secret exfiltration. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack
    writeup2026-09-23

    Binary targets credential files (.npmrc, .vault-token, id_ecdsa, credentials.db, access_tokens.json, stored_tokens), environment variables (including NPM_TOKEN, PYPI_API_TOKEN), and secret formats (AWS access keys, GitHub/GitLab tokens, npm/PyPI tokens, Hugging Face, HashiCorp Vault, Slack, Stripe,

  • AI Security Briefing
    article2026-07-18

    Once the interactive shell is opened, all credentials, API keys, tokens, and other secrets on the machine can be exfiltrated

All techniques in this workspace.