Thousands of Secrets Leaked on Code Formatting Platforms

A report by WatchTowr reveals that users of code formatting platforms like JSONFormatter and CodeBeautify are inadvertently exposing sensitive information, including credentials and API keys. In 2023, GitHub reported approximately 39 million leaked secrets, with many remaining permanently exposed. WatchTowr analyzed 80,000 JSON files from these platforms and found thousands of sensitive secrets, affecting various sectors such as technology, finance, and healthcare.

The issue arises when users save projects to create shareable links, allowing others to access recently saved content. WatchTowr emphasizes the need for better security practices, urging organizations to avoid pasting credentials into untrusted websites.