npub.world uses a service called @Vertex, which returns a proof of the leak. That's it's a signature using the leaked nsec