· ai-devtools
Claude Code "Don't Ask Again" exposes passwords in 1,122 public GitHub copies
Secrets like passwords and API keys, which developers entered into commands they sanctioned within Claude Code, have been discovered residing in publicly accessible GitHub repositories, meaning they…
Secrets like passwords and API keys, which developers entered into commands they sanctioned within Claude Code, have been discovered residing in publicly accessible GitHub repositories, meaning they are viewable by anyone.
Apiiro, a software security firm, reported yesterday that 1,122 public instances of this data were found. This vulnerability arises because when a user chooses the "Yes, and don't ask again" option, Anthropic's AI coding assistant retains the command exactly as entered, including any sensitive credentials, within a project settings file.
