top of page
perceptive_background_267k.jpg

Years of JSONFormatter and CodeBeautify Leaks Expose Thousands of Passwords and API Keys

Published:

25 November 2025 at 16:49:00

Alert date:

5 December 2025 at 08:03:22

Source:

thehackernews.com

Click to open the original link from this advisory

Cybersecurity research reveals that organizations in sensitive sectors including governments, telecoms, and critical infrastructure have been pasting passwords and credentials into online code formatting tools JSONformatter and CodeBeautify. WatchTowr Labs captured over 80,000 files from these sites, exposing thousands of sensitive credentials. The leaked data includes passwords, API keys, and other authentication materials from organizations across various critical sectors, creating significant security risks.

Technical details

Mitigation steps:

Affected products:

JSONformatter
CodeBeautify

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page