I wonder how many bugs are found this way, rather than actually looking. I found a way to extract private emails from npm a while ago, purely through chance.