（三）在铁路、城市轨道交通线路、桥梁、隧道、涵洞处挖掘坑穴、采石取沙的；
政策与地缘风险进一步加剧了经营不确定性。国内市场方面，2025 年底旧标车禁售导致渠道去库存压力，新国标强化防篡改设计也切断了其核心利润来源之一的改装服务；海外市场中，北美营收占比高达 45%，但美国 301 关税豁免期仅延长至 2026 年 11 月，欧盟反倾销调查与环保标准升级也持续压缩盈利空间。此外，公司资产负债率高达 64.95%，流动比率仅 1.25，偿债压力凸显，而 2025 年实控人减持 2% 存托凭证套现 7.88 亿元，红杉、小米系累计套现超 62 亿元，反映出资本对其增长可持续性的担忧。
，详情可参考同城约会
20+ curated newsletters
2StripeNear-MonopolyPayments
tl;dr Google spent over a decade telling developers that Google API keys (like those used in Maps, Firebase, etc.) are not secrets. But that's no longer true: Gemini accepts the same keys to access your private data. We scanned millions of websites and found nearly 3,000 Google API keys, originally deployed for public services like Google Maps, that now also authenticate to Gemini even though they were never intended for it. With a valid key, an attacker can access uploaded files, cached data, and charge LLM-usage to your account. Even Google themselves had old public API keys, which they thought were non-sensitive, that we could use to access Google’s internal Gemini.