Swept 33 public attack surfaces. Found 23,912 active machine credentials.
ChatGPT share links, .mcp.json configs, AWS ECR Public layers—all downloadable without login.
1,277 keys could mint their own replacement keys. Revoking the leaked key changes nothing.