Your AI Gateway Logs Are Now a Credential Store, Whether You Meant That or Not

An OAuth token ended up in a log file, and a few steps later a poisoned package was sitting on PyPI....