# 26,400 live cloud and AI keys found in public Gitee repositories, led by Alibaba Cloud, DeepSeek and OpenAI · pwn.watch > A researcher scanned 7.25 million public repositories on Gitee, China's largest Git host, and found 26,400 unique credentials that still worked: 9,473 Alibaba Cloud AccessKey pairs, 3,805 YouTube API keys, 3,170 DeepSeek keys, 1,489 Zhipu BigModel keys, 1,348 OpenAI keys and more, including an organization-admin key for an unnamed enterprise AI platform. Gitee has no public secret-scanning partnerships with vendors, and no revocations were confirmed at publication. Anyone who ever pushed a key to a public Gitee repo should treat it as exposed and revoke it. Page: https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026 · generated 2026-10-29T12:55:23.617Z ## Status - Severity: medium · status: live · patch: partial - Product: Gitee public repositories (leaked cloud and AI API keys) - Started: 2026-10-28 - Affected: Any cloud or AI API key ever committed to a public Gitee repository, including keys later deleted from the code (they stay in commit history) ## Follow this incident - RSS (one item per update): https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026/feed.xml - JSON Feed: https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026/feed.json - Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026.json - This file: https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026/llms.txt ## Updates (newest first) - 2026-10-29: The Hacker News reports the breakdown: 9,473 Alibaba Cloud AccessKey pairs, 3,805 YouTube API keys, 3,170 DeepSeek keys, 1,489 Zhipu BigModel keys and 1,348 OpenAI keys, plus smaller numbers for GitHub, AWS, Google Cloud and Gemini. Nearly half (12,242) came from 2025 commits. Zimmermann sent lists to the vendors with the most exposed keys but did not contact the developers, and had not confirmed any revocations when he published. (https://thehackernews.com/2026/10/26400-valid-cloud-and-ai-credentials.html) - 2026-10-28: Independent researcher Ben Zimmermann publishes a month-long scan of 7,256,531 public Gitee repositories with TruffleHog and Kingfisher: 26,400 unique credentials still authenticated at scan time, including an active organization-admin credential for an unnamed enterprise AI platform. Gitee had a higher rate (3.64 per 1,000 repos) than comparable scans of GitLab (3.11) and Bitbucket (2.39). (https://www.mongodb.com/company/blog/technical/scanning-7-point-25-million-public-repositories-chinas-largest-git-platform-for-secrets) ## Fix brief # Security brief: 26,400 live cloud and AI keys found in public Gitee repositories, led by Alibaba Cloud, DeepSeek and OpenAI Source: https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026 · status: live · severity: medium · updated Oct 29, 2026, 12:47 UTC ## Patch status **PARTIALLY PATCHED: some fixes exist, but not every affected branch/product is covered. Check carefully and apply mitigations where no fix exists.** ## What it is A researcher scanned 7.25 million public repositories on Gitee, China's largest Git host, and found 26,400 unique credentials that still worked: 9,473 Alibaba Cloud AccessKey pairs, 3,805 YouTube API keys, 3,170 DeepSeek keys, 1,489 Zhipu BigModel keys, 1,348 OpenAI keys and more, including an organization-admin key for an unnamed enterprise AI platform. Gitee has no public secret-scanning partnerships with vendors, and no revocations were confirmed at publication. Anyone who ever pushed a key to a public Gitee repo should treat it as exposed and revoke it. Severity detail: Large exposure of working keys; no confirmed abuse reported, and the researcher did not say whether anyone else used them - Product: Gitee public repositories (leaked cloud and AI API keys) ## Affected versions - Any cloud or AI API key ever committed to a public Gitee repository, including keys later deleted from the code (they stay in commit history) ## Check whether you're affected No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above. ## Fix No fixed version is listed. Follow the vendor advisory below. ## Mitigations The data marks this as partial. Until every affected component is fixed, apply the vendor mitigations from the advisories below (restrict network exposure of the affected service, disable the vulnerable feature if the advisory allows). ## Secrets to rotate This incident involves possible credential exposure. Rotate any credentials (API keys, tokens, env vars, SSH keys) that were present on affected systems or in affected builds while vulnerable/compromised versions were installed, and review access logs. ## Specific notes Search your Gitee repos (and their full git history) for API keys. Revoke and rotate any key that was ever public at the provider; deleting it from the code or rewriting history does not revoke it. For Alibaba Cloud, create a new AccessKey pair, switch apps, then disable and delete the old one, and review ActionTrail and billing for activity you did not expect. ## Latest updates - Oct 29, 2026: The Hacker News reports the breakdown: 9,473 Alibaba Cloud AccessKey pairs, 3,805 YouTube API keys, 3,170 DeepSeek keys, 1,489 Zhipu BigModel keys and 1,348 OpenAI keys, plus smaller numbers for GitHub, AWS, Google Cloud and Gemini. Nearly half (12,242) came from 2025 commits. Zimmermann sent lists to the vendors with the most exposed keys but did not contact the developers, and had not confirmed any revocations when he published. - Oct 28, 2026: Independent researcher Ben Zimmermann publishes a month-long scan of 7,256,531 public Gitee repositories with TruffleHog and Kingfisher: 26,400 unique credentials still authenticated at scan time, including an active organization-admin credential for an unnamed enterprise AI platform. Gitee had a higher rate (3.64 per 1,000 repos) than comparable scans of GitLab (3.11) and Bitbucket (2.39). ## Write-ups & news - [Scanning 7.25 Million Public Repositories on China's Largest Git Platform for Secrets](https://www.mongodb.com/company/blog/technical/scanning-7-point-25-million-public-repositories-chinas-largest-git-platform-for-secrets) - [26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories](https://thehackernews.com/2026/10/26400-valid-cloud-and-ai-credentials.html) - [Scanning 7.25M Public Repositories on China's Largest Git Platform for Secrets](https://news.ycombinator.com/item?id=50275375) ## Caveats Research finding, not an attack on Gitee itself. Gitee has not commented. patchStatus partial: the researcher notified the largest affected vendors, but no revocations were confirmed when he published. MongoDB makes Kingfisher and co-developed the post. --- Machine-readable: https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.