Tag: secret-scanning

Hardcoded Keys in React Native Bundles: Scanning Your Own Artifacts the Way Claude Scanned 1.8 Million APKs

pr0h0•September 14, 2026

Anthropic's disclosure that attackers abused Claude to scan 1.8 million Android apps for embedded secrets shows how cheap LLM-assisted static analysis has become, and why React Native developers should scan their own APK, IPA, and JS bundle artifacts for hardcoded keys before shipping.

react-nativesecuritysecret-scanning

Auditing Your Repos for Accidentally Exposed AWS GovCloud Keys

pr0h0•May 19, 2026

A practical guide to auditing GitHub repositories for accidentally exposed AWS GovCloud credentials using secret scanning, pre-commit hooks, and repo hygiene checks.

aws-govcloudgithub-securitysecret-scanning