search

davidbau / seedrandom

seeded random number generator for Javascript
2.06k stars 160 forks source link

Coveralls is vulnerable #17

Closed TimothyGu closed 9 years ago

TimothyGu commented 9 years ago

The private repo token is exposed: https://github.com/davidbau/seedrandom/blob/master/.coveralls.yml#L1

Proof of concept: https://coveralls.io/builds/1838552

davidbau commented 9 years ago

Fixed in db8f7c52b718946accc8c9a3c2fa47ae7c0a5f08.