Moltbook — 1.5M API keys exposed via Supabase misconfiguration

An AI-agent platform shipped a Supabase table with RLS disabled. 1.5 million API keys, 35,000 emails, and 4,060 private messages were reachable via anonymous HTTP requests for 72 hours.