Claude Code is accidentally exposing secrets all over GitHub
The command-line tool Claude Code is inadvertently leaking sensitive information, including API keys and passwords, when users select the "Do not ask again" permission setting. This configuration causes the tool to share context files containing secrets directly to public GitHub repositories. Users who have integrated Claude Code into their workflows are currently at risk of exposure, prompting warnings to audit repository contents and revoke any inadvertently published credentials.
Covered by 2 sources
- AArs Technica↗Kyle Orland3d ago
- HHacker News↗shmulc5d ago