It could be both. In my case my keys were used to call OpenAI, almost certain they were leaked from my Spaces secrets