1. RadicalCliffs/stagefinal
   Repository contains a hardcoded Supabase service_role key (full JWT token) in scripts/check_solana.cjs. The project is a ticket/competition platform with Solana-related functionality.

2. aicarcwallet-arc/hackthone
   Repository contains hardcoded Supabase anon key (full JWT) and a Solana deployer secret key committed directly in an HTML file, in a blockchain/crypto project (AIC token on Arc/Solana).

3. worldgist/chaincola-app1
   Repository contains a hardcoded Supabase service_role key (full JWT token) in a Solana blockchain script that fixes transaction amounts.

4. usedispatch/msg
   Solana project (Dispatch forum/messaging protocol) with a hardcoded Supabase anon key as a full JWT token directly in source code (api.ts).

5. 0xjume/rupiah-digital
   Solana blockchain stablecoin project (Rupiah Digital / $IDRS) with a hardcoded Supabase anon key JWT token committed directly in source code.

6. tr1h/huma-chain-xyz
   Solana-based Tamagotchi play-to-earn game with a real Supabase anon key (full JWT token) hardcoded in a committed PowerShell startup script.

7. anshumantekriwal/evm-agents
   Solana trading agent deployer with hardcoded Supabase service_role JWT key, AWS credentials, Privy secrets, and API keys committed directly in the README as example .env configuration.

8. romeoscript/Okxflashloan
   A Solana flash loan arbitrage bot with a committed .env.backup file containing a real Supabase anon key (full JWT), Solana private key, and Telegram bot token.

9. kurai021/lcdlab-auctionhouse
   Solana auction house project with hardcoded Supabase service_role key (full JWT token) and QuikNode RPC endpoint with API key committed directly in source code.

10. Sarvesh223/niz_bpay
   Flutter Solana Pay project with a hardcoded Supabase anon key (full JWT token) committed directly in the main.dart source file.

11. MandaWeb3/solana-rfp-tool
   Repository contains a hardcoded Supabase service_role key (full JWT token) in a Solana-related RFP tool project committed directly in source code.

12. phanh0993/trackerwallet
   Solana wallet tracker dashboard with hardcoded Supabase service_role JWT key and PostgreSQL database credentials (including password) committed directly in config.py as default values.

13. wables411/wables411.github.io
   A Solana blockchain project (token checkout/payment page) with a hardcoded Supabase anon key in checkout.js. The repository is a GitHub Pages site handling Solana SPL token payments with Phantom/Solflare wallets.

14. mrobin88/onusone-p2p
   Committed .env file contains a real Supabase anon key (full JWT token) and Solana mainnet Alchemy RPC URL in a Solana P2P project.

15. akalavre/panicswap-production
   PanicSwap is a Solana swap/trading platform that has hardcoded real Supabase credentials (both anon key and service_role key), Helius RPC API key, CoinGecko API key, Moralis API key, and other secrets as fallback defaults in env-config.php.

16. molt-dev/openclawnch
   Solana pump.fun token launcher with a hardcoded Supabase anon key (full JWT) committed directly in source code.

17. Kryptonomic/spinthewheel
   Solana-based 'Spin The Wheel' casino/meme game with a hardcoded Supabase anon key (full JWT token) directly in source code.

18. SigamManJ/what-next-v2
   Repository contains accidentally committed real Supabase credentials (both anon key and service_role key as full JWTs) along with a Solana RPC URL and payout wallet address, committed in plaintext deployment guide files.

19. cannedoxygen/SOLmates
   Solana ecosystem app (SOLmates - Tinder-style matching for Solana developers) with multiple hardcoded Supabase credentials including a service_role key and anon keys committed directly in JavaScript source files.

20. zsyborg/clicker
   Solana clicker game with hardcoded real MongoDB connection string (with password) and a commented-out but full Supabase anon key in source code.

21. wxfvwzxsq4-ship-it/flpy-game
   Flappy Bird clone game with Solana/Phantom wallet integration that has a hardcoded Supabase anon key (full JWT token) committed directly in admin.html source code.

22. HELINgo/solana-og-site
   Solana lottery site with a hardcoded Supabase service_role key (full JWT token) committed directly in source code. The comment in Chinese explicitly confirms it's the service key, not the anon key.

23. 13golds/MEME-KISIK-INU
   Solana meme token project (KISIK) with hardcoded Supabase anon key (full JWT token) directly in committed HTML source files (index.html and dashboard.html).

24. manwhatopps/realbraindash
   Repository contains multiple hardcoded Supabase anon keys (full JWTs) in documentation/guide files for a project that references Ethereum, Solana, and wallet integrations (Bybit, MetaMask-style).

25. ExpertVagabond/seekerchat
   Solana chat app with hardcoded Supabase anon key (full JWT) and Helius API key committed directly in source code as fallback defaults.

26. edusancheez2005/whale-transaction-monitor
   Whale transaction monitor for Ethereum/Solana/Polygon with hardcoded Supabase anon key AND service_role key (full JWTs), plus dozens of other real API keys committed directly in config/api_keys.py.

27. Nivasse14/final_crypto
   Solana wallet analysis project (scanDune) with hardcoded Supabase anon key (full JWT token) committed directly in source code files, related to Solana blockchain wallet monitoring and enrichment.

28. 3rdeus/AI-Gem-Hunter
   Solana token safety/sniper bot project with real Supabase service_role key, Helius API key, Birdeye API key, Telegram bot token, and multiple other credentials committed in a .env.velocity file.

29. PotatoManchild/WalletWars-v2
   Solana blockchain project ('WalletWars') with a real Supabase anon key hardcoded in config.js, committed directly to the repository.

30. smitskecbs/cbs-coin
   Solana-based CBS Coin community voting page with hardcoded Supabase anon key (full JWT) and Helius RPC API key committed directly in HTML source code.

31. WilsonArim/kyracrypto
   Committed .env file contains real Supabase anon key and service_role key (full JWTs) plus Solana QuickNode endpoints in a crypto project called KyraCrypto.

32. DylanPort/whitelspace
   Solana blockchain project (WHISTLE - decentralized RPC infrastructure) with a hardcoded Supabase service_role JWT key committed directly in source code as a fallback value.

33. Heterod0x/oto
   Solana/EVM blockchain project (voice data DePIN) with a real Supabase service_role JWT key hardcoded in a committed .env.example file.

34. CardSorting/meowaccmint
   Repository contains a hardcoded Supabase anon key (full JWT token) committed in SUPABASE_SETUP.md for an NFT minting project that supports both Ethereum and Solana wallets.

35. TradeUpCards/FFFanalytics_old
   Committed .env file contains a real Supabase anon key (full JWT token) and Helius API keys in a Solana-related analytics project (FFF Analytics with Anchor/Solana RPC references).

36. Alexanfr-God/solana-style-studio
   Solana-related web3 wallet customization project with hardcoded Supabase anon key (full JWT) and Helius RPC API key committed in a .env file.

37. Creacove/ordersoundsw
   Committed .env file contains real Supabase anon key (full JWT token) and Solana RPC endpoints/wallet addresses, indicating a Solana blockchain project with accidentally exposed credentials.

38. floopfun25/pumpClone
   A Solana pump.fun clone (meme token launchpad) with a real Supabase anon key hardcoded directly in the generate-wallets.js source file, not in a .env file but embedded as a string literal in committed code.

39. epplex-xyz/AdDrop
   Solana blockchain project (AdDrop - NFT airdrop platform) with a real Supabase anon key committed in a .env file.

40. AyushRajSinghParihar/SolSign
   SolSign is a Solana-based document signing/NFT minting project that has accidentally committed real Supabase service_role keys, JWT secrets, Gemini API keys, Resend API keys, and Helius RPC API keys in deployment guide markdown files.

41. HackDotFun/Codeting
   Solana blockchain project (Telegram Russian Roulette game with $GUN SPL token) with a hardcoded Supabase anon key committed directly in the HTML source code.

42. j1kn/crypto-raffle
   Crypto raffle platform (Ethereum/Solana) with a real Supabase anon key hardcoded in a committed SUPABASE_CONNECTION.md file.

43. Neocryptoquant/Africa_Research_Base
   Solana blockchain project with accidentally committed .env files containing a real Supabase anon key (full JWT token) and a Solana private key, found in .history directory.

44. barkprotocol/airdrop-launchpad
   Solana blockchain airdrop dApp with fully committed .env file containing real Supabase anon key, service_role key (both full JWTs), Postgres passwords, database connection strings, JWT secrets, and a Helius API key.

45. spidey000/discord_wallet_verification
   Discord bot for Solana wallet verification with hardcoded Supabase service_role key (full JWT) committed in deployment_instructions.md, along with a Discord bot token.

46. kofi-bhr/htn-project
   A Solana blockchain project (hackathon project for microloans with NFT-based identity) with a real Supabase anon key committed in a .env.local file.

47. StableExo/TheWarden
   This repository contains hardcoded Supabase credentials (both anon key and service_role key as full JWTs), a wallet private key, Alchemy API keys, and RPC URLs for Solana and Ethereum in a committed .memory/ config file for an MEV/arbitrage bot.

48. zfu9751-a11y/solana-behavioral-intelligence-api
   Solana wallet behavioral intelligence API with a hardcoded Supabase anon key (full JWT token) committed directly in index.html source code.

49. theoneandonly93/omnibark-dev
   A Solana blockchain music streaming platform (OmniBark) with a real Supabase anon key hardcoded in a committed markdown deployment guide file.

50. VDominik/SolanaFunding
   Solana crowdfunding dApp with a hardcoded Supabase anon key (full JWT token) committed directly in source code.

51. AqilaRifti/daily-sol
   Solana micro-savings app ('Daily SOL') with a real Supabase anon key committed in a .env file. The project is a Solana blockchain application for automated roundup savings converted to SOL.

52. SuleimanJuma/crypto-wise-advisor-bot
   This repository contains a hardcoded Supabase anon key (full JWT token) in the source code of a crypto advisor bot project that references Solana, Ethereum, Bitcoin, and other cryptocurrencies.

53. solottodev/solotto-lottery-dapp
   Solana lottery dApp (Solotto) with fully exposed Supabase database credentials, including superuser password, application role passwords, and complete PostgreSQL connection strings hardcoded in committed documentation.

54. joydan1/Solana-campus-marketplace
   Solana campus marketplace hackathon project with a hardcoded Supabase anon key (full JWT token) directly in the frontend JavaScript source code.

55. debtculture/debt
   Solana-based $DEBT token website with a hardcoded Supabase anon key (full JWT) committed directly in source code (wallet-manager.js).

56. billsBucket/MaPi
   MaPi is a Solana blockchain mobile map app that has a real Supabase anon key (full JWT token) hardcoded directly in the README as part of .env setup instructions.

57. Typosonic/flappytrumpcoin
   A Flappy Bird clone with Solana (Phantom) wallet integration that has a hardcoded Supabase anon key committed directly in index.html source code.

58. 0xdaivik/web3-ai
   Web3 AI assistant project with a hardcoded Supabase anon key (full JWT token) committed directly in source code (src/lib/openai.ts), along with hardcoded Etherscan API keys.

59. Anugo1/Attest-Nft
   Solana-based proof-of-attendance NFT app with a hardcoded Supabase anon key (full JWT token) committed directly in a public HTML file.

60. soundmoneyprotocol/soundmoneyapp
   A Solana-based music streaming/crypto app (SoundMoney Protocol) with a committed .env file containing real Supabase anon key, service_role key, database password, Stripe keys, a deployer private key, and numerous other API secrets.

61. iqbalsafeip/tetrischain-app
   Solana blockchain app (TetrisChain) with hardcoded Supabase anon key (full JWT starting with eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9) committed in the built .next output and also a hardcoded QuikNode RPC endpoint with API key.

62. big-pig111/10
   Repository contains a hardcoded Supabase anon key (full JWT token) in a Solana-based web application ('Land Wars') that integrates Phantom wallet and SPL token balance checks.

63. bard-sol/bard
   Solana-related dashboard project with a hardcoded Supabase anon key (full JWT token) committed directly in the HTML source code.

64. anumukul456/Hackathon-
   Hackathon project repository for a Solana blockchain dApp that has a real Supabase anon key hardcoded in the README file.

65. Fujisol/AI-trader
   AI crypto trading bot for Solana with a hardcoded Supabase anon key (full JWT token) committed directly in the dashboard HTML source code.

66. lukem1999/Soltra-Landing
   Landing page for Soltra, a stablecoin payments platform for Web3 teams, with a hardcoded Supabase anon key (full JWT) directly in the HTML source code.

67. fezola/bullet
   Solana sniper bot with hardcoded Supabase anon key and service_role key as full JWT tokens in source code (config fallback values), connected to a real 'sniper1' Supabase project.

68. jonathanvineet/tracx
   Ethereum dApp (NFT staking, MetaMask integration, leaderboards) with a hardcoded Supabase anon key as a full JWT token directly in source code.

69. Efikcoinofficialecosystem/Efikcoin-Eternal
   BSC/Ethereum blockchain project (EfikCoin Eternal) with a real Supabase anon key hardcoded directly in HTML source files used for authentication and wallet storage.

70. ethpanda-org/ETHShanghai-2025
   ETHShanghai 2025 hackathon project 'PayWay' has hardcoded Supabase anon key, SendGrid API key, and an Ethereum private key committed directly in the project README.

71. afistapratama12/aureve-nft
   This Ethereum/EVM NFT marketplace project has hardcoded Supabase credentials (both anon key and service_role key as full JWT tokens) committed directly in the SETUP.md file.

72. lucylow/helix-bridge-flow
   Ethereum cross-chain swap project with a hardcoded Supabase anon key (full JWT token) committed directly in source code (ErrorCenter.tsx).

73. sahil75416/sublendxxx
   This Ethereum blockchain project (SubLendX - a decentralized subscription lending marketplace using ERC-4907 NFTs) has hardcoded Supabase anon key JWT tokens committed in deployment documentation files (DEPLOYMENT.md and VERCEL_STEP_BY_STEP.md).

74. amal0307/NFT1
   NFT Marketplace project (Ethereum) with a hardcoded Supabase anon key (full JWT token) committed directly in source code.

75. LaVie-Org/LaVie-Frontend
   This is an Ethereum DeFi/NFT gaming project (La Vie) with a hardcoded Supabase anon key JWT token committed directly in the source code (src/App.tsx).

76. Creativesmark/gaze-breaker
   A blockchain gaming project (Gaze Breaker) with a hardcoded Supabase anon key (full JWT token) committed directly in index.html, related to an Ethereum/ERC-721 NFT minting project using MetaMask.

77. isaactolley/tokitutor
   Repository contains a hardcoded Supabase anon key (full JWT token) in a committed setup guide file (CRYPTO_SETUP.md) for an ERC-20 token learn-to-earn crypto project.

78. iQube-Protocol/iQubeBeta-Program
   Committed .env file contains real Supabase anon key and service_role key (full JWTs) for a blockchain protocol project (ICP/BTC/Solana/Ethereum integration).

79. yug49/Kinora
   Ethereum-based NFT project (Kinora) with a hardcoded Supabase anon key (full JWT token) committed directly in source code (PromptsMonitor.tsx).

80. futarchy-fi/interface
   Repository contains a hardcoded Supabase anon key (full JWT token) in an HTML file for a futarchy/governance DeFi project that integrates with Ethereum (MetaMask, ethers.js, ERC20 tokens).

81. happy2btc/friendship-community-circle
   Ethereum-related soulbound token project with hardcoded Supabase anon key (full JWT) committed directly in source code (exchange.js).

82. FerdGitUCSD/b10-blockchain-blockthentic
   Ethereum blockchain project (EVM-based digital asset verification dApp) with a hardcoded Supabase anon key as a full JWT token committed in app.json.

83. BRICSRESERVE/BRC
   Ethereum ERC20 token project (BRICS Reserve Currency) with a hardcoded Supabase anon key in source code (Dashboard.js).

84. RSET-CSE-DEPARTMENT/RSET2022-26-S6-Beta
   University blockchain project (Property Marketplace Using Blockchain/Ethereum) with hardcoded Supabase anon key committed directly in source code.

85. RudraBhaskar9439/VigilBot
   This Ethereum blockchain project (Trading Bot Detection System) has a real Supabase anon key hardcoded directly in the README as part of the frontend .env configuration example.

86. rmourey26/web3-soc2
   Repository contains a hardcoded Supabase anon key (full JWT token) in a Web3/Ethereum authentication project using MetaMask and Moralis.

87. BilkentCrypto/istanmeow
   Web3 community management protocol (Ethereum/NFT-based) with a hardcoded Supabase anon key committed directly in source code.

88. KuoBit/BitFtx
   BitFtx is a crypto prediction market project (ERC20/BSC) with a hardcoded Supabase anon key committed directly in source code (pages/index.js).

89. JoyalGJ/Novaland_V1
   Ethereum-based real estate DApp (Novaland) with a hardcoded Supabase anon key (full JWT token) committed directly in source code, along with an Ethereum contract address and MetaMask integration.

90. shravan-g-k/sock_it
   Repository contains hardcoded Supabase anon key (full JWT token) in an Ethereum/MetaMask-based blockchain real estate dApp.

91. WynnChan123/Medchain
   Ethereum-based healthcare dApp with real Supabase database credentials (PostgreSQL connection strings with passwords) and a Sepolia private key hardcoded directly in the README.

92. Efikcoinofficialecosystem/Efikcoinofficialecosystem.com
   BSC/Ethereum blockchain project (EfikCoin Eternal BEP-20 token) with a real Supabase anon key hardcoded directly in HTML source code files.

93. Kirankmm/novaland-
   Blockchain-based land marketing dApp (Ethereum/Solidity) with a hardcoded Supabase anon key committed directly in source code (MakeOffer.jsx).

94. Ahmed-Agent/Ahmed-nol
   Repository contains a hardcoded Supabase anon key (full JWT token starting with eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9) in an HTML file for a DeFi token swap platform (DEX).

95. anshhu-man/Agentic-DeFi
   Ethereum/DeFi project (Agentic-DeFi) with real Supabase anon key hardcoded in both .env.example and docker-compose.yml, plus a hardcoded Mistral API key and 1inch API key in docker-compose.yml.

96. BestDiamond9/Crypto_Dashboard
   Crypto dashboard for PulseChain (EVM-based) with hardcoded Supabase anon key and Moralis API key directly in source code.

97. LT-ops/Atropa
   Repository contains hardcoded Supabase anon key (full JWT token) and Moralis API key directly in source code for a PulseChain (EVM/ERC20) token sync project.

98. Gnome101/AutoGains
   Ethereum blockchain project (AutoGains - automated trading on Gains Network) with a hardcoded Supabase anon key JWT token committed in source code comments and referenced in contract state variables.

99. VinzSenzoo/HerafiAutoBot-NTE
   Repository contains a hardcoded Supabase anon API key (full JWT token) in index.js for the HeraFI testnet auto-swap bot, an Ethereum-related DeFi project.

100. ismaonezain/ether-trials
   Ethereum/Base blockchain tournament game (EtherTrials) with hardcoded Supabase anon key (full JWT token) committed directly in source code across multiple component files.

101. Gemavic/dates27
   Dating platform (Dates.care) has accidentally committed real Supabase anon key, Twilio credentials, and mentions Ethereum/cryptocurrency payments. Full JWT Supabase key is hardcoded in deployment documentation files.

102. harshalmadnani/agent-launcher
   Repository contains a hardcoded Supabase service_role key (full JWT token) as a fallback in source code for an AI agent launcher project that interacts with ERC20 tokens and blockchain portfolio data.

103. Jenidevaugh/A-Team
   Repository contains a hardcoded Supabase service_role JWT key committed directly in source code (userdata.js), in a blockchain/crypto project interacting with smart contracts on the Rollux chain (ERC20 staking, commerce).

104. Jenidevaugh/26-Aug
   Repository contains a hardcoded Supabase service_role key (full JWT token) in source code, within a blockchain project interacting with smart contracts on the Rollux chain (EVM-compatible).

105. yazanalawaad3-stack/test
   Repository contains a hardcoded Supabase anon key (full JWT token) in a crypto deposit page handling USDT deposits across BEP20/TRC20/ERC20 networks.

106. TheLastHobbit/EVM-Study
   This is an Ethereum/EVM study project with a hardcoded Supabase anon key (full JWT token) committed directly in source code, used in an NFT marketplace frontend.

107. victorfomich/Wallet-test-5
   This is a crypto wallet Telegram Mini App (DreamWallet) for TON/Solana/Ethereum/TRON/BNB with hardcoded Supabase anon key AND service_role key committed directly in source code. Additionally, the app contains a seed phrase stealing mechanism.

108. DJDIVISION/pacgames
   This repository contains hardcoded Supabase anon key (full JWT token) and a Telegram bot token in a TON-related gaming project (roulette game with Toncoin price integration).

109. Sirriiv/Nemex-mining-app
   TON blockchain wallet/mining app with a hardcoded Supabase anon key (full JWT token) committed directly in the HTML source code.

110. Badaboom1995/jumpster
   Telegram Mini App (TON Connect) with a hardcoded Supabase anon key (full JWT token) committed directly in source code.

111. Dynamic-Capital/Dynamic-Capital
   TON blockchain project (Telegram Mini App with .ton domain) with a real Supabase anon key hardcoded in a committed deployment config file (.do/app.yml).

112. pmfxtrade-svg/wallcrypto
   Repository contains a hardcoded Supabase anon key (full JWT token) in App.tsx for a crypto wallet tracking application.

113. mitulbhowmik01/index.html
   Telegram mini app (Coin Mini App) with a hardcoded Supabase anon key (full JWT token) committed directly in the HTML source code.

114. webapp342/waitlist
   Repository contains hardcoded Supabase service key (full JWT token) and Telegram bot token in a BSC blockchain waitlist/staking project with a Telegram bot component.

115. XAAIN12334/tap-to-earn-bot
   A TON blockchain tap-to-earn Telegram bot with accidentally committed .env file containing real Supabase anon key, service_role key (both full JWTs), Telegram bot token, TON API key, and wallet address.

116. nniikk99/t-company-service
   Repository contains a hardcoded Supabase anon key (full JWT token) in VERCEL_DEPLOY.md for a Telegram Mini App project, matching the search criteria for real Supabase credentials in a TON/Telegram ecosystem project.

117. Somesh413/Telegram-mini-app
   Telegram mini app with a hardcoded Supabase anon key (full JWT token) committed directly in the HTML source code. This is a Telegram mini app project matching the TON/Telegram category.

118. enaya12q/samrt_coin_bot
   A Telegram mini app (Smart Coin) for TON blockchain with a hardcoded Supabase anon key JWT token and a Telegram Bot token committed directly in source code.

119. HEMONY/smart_en
   A TON blockchain Telegram mini app (Smart Coin) with a hardcoded Supabase anon key JWT token committed directly in source code, along with a Telegram bot token in the README.

120. or23/diamond-muzzle-vision-49
   Telegram Mini App (diamond marketplace) with a hardcoded Supabase anon key (full JWT token) committed directly in source code in useAGUIClient.ts.

121. tonworkspace/ton-staking-ui
   TON blockchain staking Telegram Mini App with hardcoded Supabase anon keys (full JWT tokens) committed directly in source code.

122. Alamin4545u/Mywebsiteccf
   Telegram mini app with hardcoded Supabase anon key (full JWT token) committed directly in source code. This is a Telegram-based earning/referral bot, which qualifies as a TON/Telegram mini app project.

123. Xearper/TeleCryptoMiner
   Telegram crypto mining mini-app with a hardcoded Supabase anon key (full JWT token) committed directly in source code.

124. tonworkspace/DivineTap
   TON blockchain Telegram mini app with multiple hardcoded Supabase anon keys (full JWT tokens) directly in source code, including an actively used one and two commented-out ones.

125. annachou5566/wave-alpha
   Repository contains a hardcoded Supabase anon key (full JWT token) in script.js for a Telegram Mini App (Wave Alpha) that appears to be crypto/trading related.

126. yagpka/Helix
   Telegram mini app (gacha/slot game with TON and SOL balances) with a hardcoded Supabase anon key committed directly in script.js. The project is a crypto-related Telegram Web App handling TON and SOL balances/withdrawals.

127. AMBcomp/clickergame
   TON blockchain clicker game (Telegram mini app style) with a hardcoded Supabase anon key (full JWT token) committed directly in source code.

128. antsincgame/martket.ton
   TON blockchain marketplace project with a real Supabase anon key hardcoded in netlify.toml build configuration file.

129. Reoneo/vanity-box
   Web3 profile app (Vanity Box) with hardcoded Supabase anon key JWT tokens directly in source code, related to TON blockchain and Ethereum/ENS profiles.

130. igoigloo/FairHold_ETHGlobal
   Ethereum blockchain project (Smart Escrow Platform built for ETHGlobal hackathon) with real Supabase credentials (both anon key and service_role key as full JWTs) hardcoded in a committed .env file, along with a Supabase PostgreSQL connection string with plaintext password and a Coinbase CDP private key.

131. Arthu133/cripto-base-advisor-bot
   Repository contains a hardcoded Supabase anon key (full JWT token) as a fallback value in a crypto advisor Telegram bot's source code.

132. joshuakatumba/PolkaDot-Hackathon
   Repository contains a committed .env file with a real Supabase anon key (full JWT token starting with eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9) hardcoded in a Polkadot/blockchain project.

133. arhovumyan/crypto-stuff
   Solana auto-sniper/crypto trading bot with a hardcoded MongoDB Atlas connection string containing real credentials (mongodb+srv://trader:2srEa7DsHGdFKNZ6@trader.whpvjg3.mongodb.net/) committed directly in source code.

134. gitshahid3/trendbot
   A TON blockchain Telegram bot (crypto trending bot) with hardcoded MongoDB connection string, Telegram bot token, and TON API key committed directly in source code.

135. FazzytheDev/app.heirston
   Repository contains a hardcoded MongoDB connection string with real credentials (username: fawazogunleye, password: Aabimbola2022) and a Telegram bot token, in what appears to be a Telegram mini app project ('heirstonvolt').

136. gretg311-design/tg-miniapp
   Telegram mini app with hardcoded MongoDB connection string (mongodb+srv://Owner:owner@tg-miniapp.hkflpcb.mongodb.net), multiple Telegram bot tokens, and a CryptoBot token committed directly in server.js source code.

137. bdemir97/bugi_binance_bot
   Binance crypto trading bot with a hardcoded MongoDB connection string containing real credentials (username: idemir, password: Bugra07.) committed directly in source code.

138. notbez/SBT
   Telegram bot project with a hardcoded MongoDB connection string containing real credentials (username: mishkan150108, password: mishkan150108) as a fallback in source code. The project is TON-related, featuring a TON wallet donation address and CryptoBot integration.

139. TitlelessMahadi/LIterCoin
   Telegram bot project (LiterCoin) with hardcoded MongoDB connection string containing real credentials and a Telegram bot token committed directly in source code.

140. DhanushPrakash6/Boostify-Telegram
   Telegram mini app (Boostify) with hardcoded MongoDB connection string containing real credentials and an Alchemy API key, interacting with Ethereum and Solana blockchains.

141. Arpi33/Crypto_sentiment
   Crypto sentiment analysis project with hardcoded real MongoDB connection string (mongodb+srv://arpibibi01:YYmrMBOoPeVr0Ppo@era0.y55y42e.mongodb.net/) and a Twitter API bearer token committed directly in source code.