Comment by tpaksoy

Apparently there was a "blogpost" of a developer showing of their code, where they accidentally leaked access tokens in a piece of commented code: https://archive.ph/mP3bh

This is completely unverified though, so take it with a grain of salt.