Research reveals 2,863 public Google API keys can access Gemini endpoints, enabling data exposure and massive billing abuse.

A "coordinated developer-targeting campaign" is using malicious repositories disguised as legitimate Next.js projects and ...