Truffle Security said its Hugging Face scan found 221,303 live credentials
Dylan Ayrey's couch-born TruffleHog found reused keys across public AI corpora, where deleting one source cannot erase its copies.
By Ryan Merket · Published
Primary source: Truffle Security
Why it matters
Public AI datasets are copied and remixed faster than leaked keys are revoked, turning one exposed credential into a persistent supply-chain risk.
Dylan Ayrey (@InsecureNature), the co-founder and CEO of Truffle Security, said his security scanner found 221,303 live, unique credentials across 6,003 public datasets hosted by Hugging Face. The findings came from a scan covering 7.6 petabytes of data, according to research Truffle published on June 1st.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.