PRP: Secret extractor for DeepSeek API Key #1132
Description
- Secret name: DeepSeek API Keys
- Risk in exposing the secret: Attackers typically use stolen DeepSeek API keys to make unauthorized API calls at the victim's expense, potentially racking up large bills or exhausting usage limits. They may also use the keys to access or extract data through the API
- Validation method, if any:
curl https://api.deepseek.com/chat/completions \
-H "Content-Type: application/json" \
-H "Authorization: Bearer <DeepSeek API Key>" \
-d '{
"model": "deepseek-chat",
"messages": [
{"role": "system", "content": "You are a helpful assistant."},
{"role": "user", "content": "Hello!"}
],
"stream": false
}'
- Resources: