Unverified50% confidenceFactExact time
Affected sites include URL shortening services, paste sites, RubyGems, a Vanderbilt University statistics page, a chemistry wiki, and the FBI crime statistics API accessed via a leaked key.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/12/2026
First Seen
Valid until: 12/11/2026
Sources
Related Entities
Related Claims
UnverifiedA research team at North Carolina State University conducted a large-scale scan of public GitHub repositories and found hundreds of thousands of repositories exposing API keys, OAuth tokens, and cryptographic private keys, including AWS credentials, Google Cloud keys, and Slack Webhook URLs.64% similarUnverifiedSecurity vendors perform large-scale correlation analysis using passive DNS data, certificate transparency logs, and threat intelligence sharing platforms (such as MISP) to identify abusive domains.64% similarUnverifiedRepresentative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.63% similarUnverifiedMany malicious packages exploited RubyDoc.info's documentation build process to steal data from UK government websites.62% similarUnverifiedMainstream secret scanning tools include the open-source Gitleaks, TruffleHog, and detect-secrets, as well as the commercial GitGuardian and GitHub Advanced Security's Secret Scanning.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/915692API
curl https://kongchang.com/api/v1/knowledge/claims/915692MCP
get_claim(id=915692)