WhisperX tag archive

#Code Vulnerabilities

This page collects WhisperX intelligence signals tagged #Code Vulnerabilities. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (1)

The Lab · 2026-03-31 08:27:05 · GitHub Issues

1. [SECURITY TRIAGE] Critical: Hugging Face Token Leak in Training Data, 240+ Code Alerts, Coherence Failures

A critical security triage reveals a live Hugging Face API token has been publicly exposed in the repository's training data for at least 18 hours. The token, with the prefix `hf_sUYKuMlbFnJkwGkewyHNlNKbD...`, was found embedded within two key data files: `training-data/sft/consolidated_root_sft.jsonl` and `training-da...