AITechTalks2 months ago
Claude Code is leaking API keys into public package registries
1 min read
A Lakera study found Claude Code caches approved terminal commands in a hidden local file. Selecting "allow always" stores API keys permanently. Publishing a project to a public registry without ignoring that directory ships the keys globally alongside the source code.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAnthropic