We leaked LLM gateway api keys for 35 days. Here's what happened.

Researchers set up two honeypot LLM gateways and exposed 179 API keys across convincing mock GitHub repositories over a 35-day period. They observed over 3 million requests, revealing automated probing, credential testing, and usage by API relays and automated coding agents. Open article →