It started when someone typed git push without realizing an API token had been committed alongside the code. GitGuardian, which monitors public repositories for exposed secrets, searched GitHub for leaked n8n API tokens and found 4,576 unique tokens tied to 1,255 hostnames. Of the 896 instances still reachable online, 321 accepted at least one leaked token immediately. The numbers tell the storyThe most important figure isn't 4,576 leaked tokens. Discovery Funnel Count Leaked API tokens 4,576 Hostnames identified 1,255 Reachable instances 896 Accepted leaked tokens 321A leaked token is a mistake.