{"id":246174,"date":"2026-10-30T03:50:02","date_gmt":"2026-10-30T08:50:02","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/10\/26400-valid-cloud-and-ai-credentials-found-exposed-in-public-gitee-repositories"},"modified":"2026-10-30T03:50:02","modified_gmt":"2026-10-30T08:50:02","slug":"26400-valid-cloud-and-ai-credentials-found-exposed-in-public-gitee-repositories","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/10\/26400-valid-cloud-and-ai-credentials-found-exposed-in-public-gitee-repositories","title":{"rendered":"26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories"},"content":{"rendered":"\n<p>26,400 credentials that developers left in public code on <strong>Gitee<\/strong>, a Chinese code-hosting service, still worked when a researcher tested them. Anyone who copied one from that code could have used it.<\/p>\n<p>Independent researcher <strong>Ben Zimmermann <\/strong>found them by scanning 7.25 million public Gitee repositories and <a href=\"https:\/\/www.mongodb.com\/company\/blog\/technical\/scanning-7-point-25-million-public-repositories-chinas-largest-git-platform-for-secrets\" target=\"_blank\">reported the results<\/a> on October 28. Most were keys for cloud and AI services, led by 9,473 Alibaba Cloud AccessKey pairs.<\/p>\n<p>Zimmermann sent the vendors with the most exposed keys a list of their credentials, but he did not contact the developers who leaked them. When he published, he had not confirmed that any of the reported credentials had been revoked. So anyone who has pushed a key to a public Gitee repository cannot assume it has been revoked.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>26,400 credentials that developers left in public code on Gitee, a Chinese code-hosting service, still worked when a researcher tested them. Anyone who copied one from that code could have used it. Independent researcher Ben Zimmermann found them by scanning 7.25 million public Gitee repositories and reported the results on October 28. Most were keys [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-246174","post","type-post","status-publish","format-standard","hentry","category-robotics-ai"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/246174","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=246174"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/246174\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=246174"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=246174"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=246174"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}