⚠️ ShipLatch educational DEMO — CRITICAL: Supabase service_role admin key in the browser. This is a fictional, deliberately-insecure teaching page run by ShipLatch. It is NOT a real app or company. The admin key below is a fake JWT that decodes to role=service_role but is signed with a dummy secret, so it authenticates nowhere.
VulnBox Dashboard
Fictional business dashboard. Its JavaScript bundle ships a Supabase service_role key — the class of bug ShipLatch catches. Scan this page at shiplatch.com.