Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them.
AIHUB
Claude Code Approval Files Expose Secrets in 1,122 Public GitHub Copies
Passwords and API keys entered into commands approved through Claude Code were reportedly exposed in public GitHub repositories. The issue was identified across 1,122 publicly accessible copies of the tool's “Don't Ask Again” file.
This highlights a concrete AI coding-tool security risk for developers handling credentials and publishing repositories.
Comments & Questions (0)
No comments yet
Be the first to comment!