1 result · Clear filters · Feed
-
Medium —
ogham-mcp had credentials embedded in published PyPI sdists -- Neon postgres URLs and Voyage API key
## Summary Between 2026-02 and 2026-04-24 a total of 22 public PyPI sdists of `ogham-mcp` contained development credentials embedded in source files. All credentials have since been rotated on the respective providers. No known exploitation. Upgrade to **v0.1…