ZoomEye: 1.3M GitLab and 115K Gitea instances exposed online

An analysis on DEV Community citing ZoomEye measurements from 20 September 2026 found 1,315,022 internet-observable GitLab instances, 115,463 Gitea, 33,772 Nexus Repository and 11,586 SonarQube. The author calls build infrastructure and artifact repositories trust anchors, since compromising one lets attackers ship code that trusted pipelines will accept.

• GitLab returned 1,315,022 matches, Gitea 115,463, Nexus 33,772
• SonarQube 11,586, Artifactory 1,524, Jenkins only 3 matches
• Measurements taken 20 September 2026 via ZoomEye, sub_type=all
• Author urges removing public reachability from CI and separating build from publish identity