@secureintent.ai: someone scanned 7.25 million public code repositories and found 26,400 keys that still worked. the repos were on gitee, china’s biggest code-hosting platform. researcher ben zimmermann ran two open-source secret scanners across every repo’s full history, then tested each key against the service that issued it. 9,473 alibaba cloud keys. 3,170 deepseek keys. over 1,000 openai keys. and one active org-admin credential for a major enterprise AI platform. almost half were committed in 2025 alone. and deleting a key from your code doesn’t remove it. it stays in git history. the fix isn’t deleting. it’s revoking. if a key was ever public, rotate it and set spend limits. sources: ben zimmermann (mongodb blog), the hacker news, runtimewire #dev #secrets #ai #git #cybersecurity #mongodb #code #repository #china #api #keys

official

Open In TikTok:

Region: GB

Sunday 01 November 2026 18:00:08 GMT