Scanning 7.25M Public Repositories on China's Largest Git Platform for Secrets
kernelrocks
29 points
6 comments
October 28, 2026
Related Discussions
Found 5 related stories in 134.2ms across 10,874 title embeddings via pgvector HNSW
- Git at Any Scale meetpateltech · 30 pts · August 18, 2026 · 54% similar
- The bridge to agent-scale Git infrastructure Klaster_1 · 59 pts · October 21, 2026 · 51% similar
- GitLab Security Incident: Attempted Exploitation of CVE-2026-97229 sashk · 136 pts · October 28, 2026 · 51% similar
- Gheist campaign plants secret-dumping workflows using stolen GitHub tokens acossta · 47 pts · October 25, 2026 · 50% similar
- Lessons Learned from CISA's Recent GitHub Leak Bender · 14 pts · July 13, 2026 · 50% similar
Discussion Highlights (3 comments)
dorianmariecom
same on github or gitlab etc
nitroedge
So what happens if someone uses some of these credentials and enjoys free AI for as long as they are active? Just curious if this is is criminally enforced now and what the penalties have been? I remember there was a site awhile ago that listed Ollama instances which were made open to the public and had the # of tokens/sec throughput beside each one.
gosen
Surprised the gap is that small! 3.64 vs 3.11 per 1k repos I'd have expected Gitee to be way worse with no scanning partnerships at all.. would be curious to see GitHub in that table, to know how much push protection actually changes that number