open-source-contributions
Fail
Audited by Socket on Feb 15, 2026
1 alert found:
Obfuscated FileObfuscated Fileassets/bad-pr-example.md
HIGHObfuscated FileHIGH
assets/bad-pr-example.md
This document is an instructional 'bad PR' example showing critical repository hygiene and security failures (committed plaintext secrets and personal notes, accidental test files, large unfocused PRs, and failing CI). It is not executable malware, but the committed secrets represent a high-impact security breach if pushed and accessible. Immediate mitigation is credential rotation and git-history cleansing, plus implementing preventative processes (secret scanning, .gitignore, smaller focused PRs, CI gating).
Confidence: 98%
Audit Metadata