A private wallet key was inadvertently exposed within the Pump Science codebase, allowing attackers to exploit it for bogus token creation.