← Back to report

Investigate Hugging Face access token

Build 1.00.856.023 · Scan 2026-10-07T11:53:25.475Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

A Hugging Face access token. If active it can read/write models and datasets under the developer's account — rotate it.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type
Static string match
Representative location
assets/bin/Data/data.unity3d
Recorded match
hf_•••••••• (21–40 chars, redacted)
Detector rule
huggingface_token
Recorded file locations
  • assets/bin/Data/data.unity3d