It seems the most common issue of them all is an exposed .env file by that measure.