← Back to report

Investigate Twilio Account SID

Build 1.6.5 · Scan 2026-10-12T16:49:53.971Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

A Twilio Account SID. On its own it's an identifier, not a secret — but paired with a leaked auth token it grants full account access (SMS/voice billed to the developer). Flagged medium; check whether the auth token ships too.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Static string match

Representative location

classes.dex

Recorded match

•••••••• (21–40 chars, redacted)

Detector rule

twilio_sid

Recorded file locations

• classes.dex