The technology vendor – COEMPT Edu Teck Pvt Ltd, associated with the Central Board of Secondary Education (CBSE) has come under fresh scrutiny after social media posts alleged that a publicly accessible code repository contained plaintext login credentials, raising concerns over software security practices.
In a post on X, cybersecurity researcher Nisarga wrote: “Remember COEMPT, the shady vendor cbse hired?” The post included screenshots purportedly showing a repository linked to COEMPT Edu Teck Pvt Ltd and what appeared to be a file containing email IDs and passwords stored in plaintext. The researcher also commented, “It can’t be real.”
