AIArs Technicaabout 1 hour ago
Claude Code Leaks Secrets on GitHub
1 min read
AI security researchers at Apiiro discovered that Claude Code accidentally exposes thousands of secrets, including database passwords and API tokens, on public GitHub instances due to a settings file oversight. This occurs when users select the 'Yes, and don't ask again' option for automated shell commands, storing the choice in local files.
Level
Hype check
Tap to vote and see what everyone thinks.
