Claude Code's 'Don't Ask Again' Put 1,122 Passwords on Public GitHub
Security firm Apiiro found 1,122 public Claude Code settings files on GitHub holding real secrets, after developers clicked “Yes, and don’t ask again” and the tool saved their full commands — passwords included — in plain text. The files are still public, and Anthropic has not replied publicly. Full story in slides above — Sources: Apiiro research (Nov 5, 2026), The Hacker News, Ars Technica.