A credential file (backend/test_compra.py) was committed and later deleted but remains reachable via git history in commits fe475af → 44281a3.

Action required — must be run manually by a repo owner with force-push access:

# 1. Install git-filter-repo if not present
pip install git-filter-repo

# 2. Rewrite history to remove the file from all commits
git filter-repo --path backend/test_compra.py --invert-paths --force

# 3. Force-push all branches/tags (DESTRUCTIVE — coordinate with all contributors)
git push origin --force --all
git push origin --force --tags

After cleanup:

• All contributors must re-clone or run git fetch --prune && git reset --hard origin/main
• Rotate any credentials that appeared in backend/test_compra.py
• Invalidate/regenerate API keys referenced in that file

Status: Pending manual execution.