Thanks For Paying For My AI Tokens

Zeabur exposed environment variables, letting attackers drain customers' AI API balances. Nothing says modern cloud like funding a thief's prompt habit.

Source: Zeabur Environment Variable Leak: Stolen API Keys Drain Claude & OpenRouter Balances

The Full Story

Severity: High Mood: Frustrating

Just another Tuesday in IT, as hosting platform Zeabur managed to let unauthorized visitors rummage through customer environment variables. Unsuspecting developers using Anthropic and OpenRouter saw their credit balances swiftly drained by freeloading threat actors. Preventing our corporate wallets from bleeding dry after such hosting blunders means dropping everything to rotate every single stored secret, token, and credential immediately while wondering why secrets are never actually secret.

#keyrotation #apileak

Open article →