Claude Code 'Don't Ask Again' Leaked Passwords and API Keys Into 1,122 Public GitHub Files
A single click in Anthropic’s Claude Code has been quietly copying developers’ passwords and API keys into a file that anyone on GitHub can read. Security firm Apiiro said on November 5 that 1,122 public copies of that file hold at least one secret, and the total reaches 2,539 secrets across 1,994 repositories once git history and shared settings files are counted. The cause isn’t a hack or a prompt-injection trick. It’s a convenience feature doing exactly what it was built to do. ...