Which of the following is a common source of unintentional corporate credential leakage in cloud environments?

Code repositories are a common source of unintentional credential leakage because developers often embed API keys, database passwords, or other sensitive credentials directly into code or configuration files, which are then committed to public or internal repositories. This oversight makes the credentials accessible to anyone with access to the repository. The dark web is a marketplace for stolen credentials, not a source of unintentional leakage. Threat feeds provide information about threats, not a leakage source. State actors are sophisticated attackers, not a leakage source. Vulnerability databases list known software flaws, not credential leaks.