26,400 still-valid cloud and AI keys sit exposed in public Gitee repositories

On October 28, 2026, researcher Ben Zimmermann published the result of scanning 7.25 million public Gitee repositories: 26,400 cloud and AI credentials still worked, including 9,473 Alibaba Cloud AccessKey pairs. Removing a key from the code does not revoke it — the only defense is rotation at the provider.