In a nutshell: first, check if the leak contains any secrets such as API keys or passwords and to take appropriate action to quickly invalidate exposed credentials Then, try to engage a conversation directly with the user who made the code publicly available on the platform.