Unverified50% confidenceFactExact time
A research team at North Carolina State University conducted a large-scale scan of public GitHub repositories and found hundreds of thousands of repositories exposing API keys, OAuth tokens, and cryptographic private keys, including AWS credentials, Google Cloud keys, and Slack Webhook URLs.
1
Sources
50%
Confidence
Long-term
Relevance
9/11/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedGitHub has reported that thousands of API keys are accidentally committed to public repositories every day, resulting in serious security incidents.76% similarUnverifiedMainstream secret scanning tools include the open-source Gitleaks, TruffleHog, and detect-secrets, as well as the commercial GitGuardian and GitHub Advanced Security's Secret Scanning.74% similarUnverified数据外泄手段包括 HTTPS POST 请求、DNS 隧道以及利用 GitHub/GitLab 公开 API 创建仓库或 Gist 存储被盗数据72% similarUnverified如果API密钥被硬编码上传至公开仓库，会因GitHub被自动化爬虫扫描而产生意外费用、账号被封禁或数据泄露风险70% similarUnverified被窃取的密钥被编码成数组形式伪装成正常数据外泄，可规避基于正则表达式的密钥泄露检测工具如GitHub Secret Scanning或TruffleHog68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/895216API
curl https://kongchang.com/api/v1/knowledge/claims/895216MCP
get_claim(id=895216)