8,000+ ChatGPT API Keys Left Publicly Accessible

### Executive summary Cyble Research and Intelligence Labs identified mass exposure of OpenAI/ChatGPT API keys—over 5,000 in public GitHub repos and roughly 3,000 on live websites—resulting from hardcoded keys in source code and client-side JavaScript; attackers rapidly harvest and validate these keys to run inference at scale, generate phishing and malware content, circumvent restrictions, and drain victims' billing accounts, prompting recommendations for improved secrets management and monitoring.