Note: Some of these may be false positives and don't need correcting as they may just be strings or variable names, not actually resulting in API queries...
reedy@deploy1002:~$ mwgrep --user preferencestoken commonswiki User:Firefly/2021 Gadget-EnhancedPOTY.js commonswiki User:Leaderboard/Gadget-EnhancedPOTY.js commonswiki User:Odisha1/WLEI.js commonswiki User:Tucoxn/common.js (total: 4, shown: 4) reedy@deploy1002:~$ mwgrep --no-private preferencestoken commonswiki MediaWiki:Gadget-EnhancedPOTY.js (total: 1, shown: 1) reedy@deploy1002:~$