26,400 valid cloud AI credentials exposed Gitee repos

A researcher found 26,400 working developer credentials left in public code repositories on Gitee, a Chinese code-hosting platform. Scanning 7.25 million public repos revealed mostly cloud and AI service keys that attackers could abuse immediately. Anyone with access to these repositories could use the exposed credentials to compromise accounts and cloud infrastructure. Developers should rotate exposed credentials urgently and use secrets management tools to prevent similar leaks.