AI article

An API key in a React bundle: 33 days to compromise

Brevo emailed me about a Bulgarian VPS using my API key. It had been sitting in a public React bundle for 33 days. Here is the audit that followed.

Dev.to | Jun 18, 2026 | Lain

Read the original article