Security-related question about a possible exposed credential

[Emma-NYL]

Hello,

My name is Emma, I am conducting an academic study on possible credential exposure in public GitHub repositories.

While analyzing this repository, I found a string that may represent a credential. I'm including the code snippet below containing possible leakage. To avoid exposing sensitive information publicly, I marked the sensitive information.

Could you please help clarify whether the detected string is:

1. a real credential, or
2. a placeholder / example value?

Thank you for your time.

---

Code snippet (sensitive values masked):

  ->create();

  //Using properties
  $request = new CreateUserRequest();
  $request->name = 'j****';
  $request->email = 'j********oo.com';
  $request->p****word = 'p****';

  $responses[] = $request->create();

  print_r($responses);
  die;
}

Thank you in advance for your time - I really appreciate it!

Sincerely,
Emma

[jurgisk]

Most likely a test piece of code to smash it directly. By the looks of it very well could be real creds. But chances of them still hacing the same password are slim to none.

…

On Mon, Mar 9, 2026 at 10:38 PM Emma-NYL ***@***.***> wrote: *Emma-NYL* created an issue (phrest/skeleton#4) <#4> Hello, My name is Emma, I am conducting an academic study on possible credential exposure in public GitHub repositories. While analyzing this repository, I found a string that may represent a credential. I'm including the code snippet below containing possible leakage. To avoid exposing sensitive information publicly, I marked the sensitive information. Could you please help clarify whether the detected string is: 1. a real credential, or 2. a placeholder / example value? Thank you for your time. ------------------------------ *Code snippet (sensitive values masked):* ->create(); //Using properties $request = new CreateUserRequest(); $request->name = 'j****'; $request->email = 'j********oo.com'; $request->p****word = 'p****'; $responses[] = $request->create(); print_r($responses); die; } Thank you in advance for your time - I really appreciate it! Sincerely, Emma — Reply to this email directly, view it on GitHub <#4>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAM4PG2IFMH3E4LIXAICHAT4P5BVPAVCNFSM6AAAAACWMM2X4KVHI2DSMVQWIX3LMV43ASLTON2WKOZUGA2DQMRYGM4TQNQ> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>