Mmastodon first seen 5 d ago, last 3 d ago, peak #2

Claude Code's 'Don't Ask Again' File Exposes Passwords and Keys

Original: Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

Security firm Apiiro reports that Claude Code's 'Don't Ask Again' mechanism stores secrets in approved commands, exposing 2,539 credentials across 1,994 public GitHub repositories. Developers who approved commands containing passwords and API keys unknowingly committed them in plaintext, with 1,122 copies found publicly accessible. The findings raise concerns about AI coding assistants leaking sensitive credentials.

Why now: Researchers just published findings that a widely used AI coding tool leaks real credentials at scale.

Claude CodeGitHubApiiroAnthropic

Open on mastodon →

Evidence

• Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub · The Hacker News

  Claude Code saves secrets in approved commands, exposing 2,539 credentials across 1,994 public GitHub repositories, Apiiro finds.

API: https://socialmediatrends-api.osmike.com/v1/trends/5231749