We scanned every public dataset on Hugging Face for live secrets: 7.6 petabytes across 187 million files. We found 221,303 working credentials, including tokens that can push code into software millions of people install.