On a similar note, I recently found the Instagram and FB tokens for a prominent media outlet right in their website source code, presumably for auto posting to

On a similar note, I recently found the Instagram and FB tokens for a prominent media outlet right in their website source code, presumably for auto posting to those sites. Is that a security issue or normal? (Sorry in advance, I'm new to the whole security space)