A scan of 7.25 million public repositories on China’s Gitee uncovered 26,400 verified-live credentials, including cloud keys and enterprise AI tokens. The findings highlight serious secrets-exposure risks in public code hosted on the platform.