Research reveals 2,863 public Google API keys can access Gemini endpoints, enabling data exposure and massive billing abuse.
Probably not an isolated incident only as researchers have already found 2,863 live API keys exposed A developer says their ...
Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI ...
XDA Developers on MSN
Tailscale's new tool ensures people aren't feeding sensitive data to AI
It also makes storing API keys easier.
A self-replicating npm worm dubbed SANDWORM_MODE hits 19+ packages, harvesting private keys, BIP39 mnemonics, wallet files and LLM API keys from dev environments.
Over 2,800 exposed Google API keys may allow unauthorized Gemini AI access, risking data leaks and massive API charges.
The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results