Mmastodon first seen 5 d ago, last 4 d ago, peak #2

Claude Code's 'Don't Ask Again' File Exposes Passwords and Keys

Original: Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

Security firm Apiiro reports that Claude Code's 'Don't Ask Again' mechanism stores secrets in approved commands, exposing 2,539 credentials across 1,994 public GitHub repositories. Developers who approved commands containing passwords and API keys unknowingly committed them in plaintext, with 1,122 copies found publicly accessible. The findings raise concerns about AI coding assistants leaking sensitive credentials.

Why now: Researchers just published findings that a widely used AI coding tool leaks real credentials at scale.

Claude Code GitHub Apiiro Anthropic

Open on mastodon →

Rank over time, top of the chart is #1. 149 snapshots from 5 d ago to 4 d ago.

Evidence

Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub · The Hacker News
Claude Code saves secrets in approved commands, exposing 2,539 credentials across 1,994 public GitHub repositories, Apiiro finds.

API: https://socialmediatrends-api.osmike.com/v1/trends/5231749