A month-long scan of 7.25 million Chinese repositories produced 26,400 credentials that still authenticated when tested.
CARBONATO hijacks exposed Docker daemons, then runs an AI agent to loot credentials and fund its own model access.
In 2025, the number of hardcoded secrets exposed in public repositories surged 47% year-over-year to 28.7 million, driven by the…