Thousands of Cloud and AI Credentials Exposed on Gitee

An independent researcher has identified 26,400 valid cloud and AI credentials publicly exposed in Gitee repositories, a Chinese code-hosting service. The leaked keys, which were confirmed to be functional, included access for platforms such as Alibaba Cloud, YouTube API, DeepSeek, Zhipu's BigModel AI, and OpenAI. This incident underscores a substantial supply chain security risk, as unauthorized parties could have exploited these credentials.