Unverified60% confidenceBenchmarkExact time
Researchers crawled 315,320 reasoning blocks from public repositories on GitHub and Hugging Face, recovering via decryption 367 pieces of personally identifiable information (PII) and 182 credentials (including 62 API keys, 33 passwords, and several private keys).
2
Sources
60%
Confidence
Medium-term (~90 days)
Relevance
8/23/2026
First Seen
Valid until: 11/21/2026
Sources
LLM推理链被盗：三大厂商架构级漏洞深度解析
Related Entities
Related Claims
UnverifiedAccording to The Hacker News, Operation GhostAction discovered by GitGuardian affected about 1,900 GitHub accounts and more than 30,000 repositories, with payloads attempting to steal 3,174 secrets from CI environments, including npm, PyPI, DockerHub, and AI vendor credentials.77% similarVerifiedAccording to official GitHub data, over 12 million leaked keys were detected on the platform in 2023.69% similarUnverifiedWhen Truffle collaborated with Hugging Face to clean up leaked credentials in the platform's training datasets, approximately 250,000 valid keys were found.68% similarUnverifiedIn July 2024, a security company disclosed approximately 7,600 malicious GitHub repositories, of which more than 800 directly impersonated AI plugins, with the total download count of these plugins and tool servers exceeding 14 million.66% similarUnverifiedA team successfully stole nearly 4,000 internal GitHub repositories through a malicious VS Code extension.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/792606API
curl https://kongchang.com/api/v1/knowledge/claims/792606MCP
get_claim(id=792606)