Claude Code approvals leak passwords and API keys to GitHub
Original title: Claude Code’s “Yes, and Don’t Ask Again” Option Can Leak Passwords and API Keys to GitHub
Apiiro found 2,539 secrets in 1,994 public repositories from routine Claude approvals.
Apiiro researchers discovered that Claude Code's 'Yes, and don’t ask again' option saves commands containing credentials to .claude/settings.local.json. This file can be committed to GitHub during normal development tasks like database checks or API tests. They scanned 104,185 public copies and identified 2,539 distinct secrets across 1,994 repositories in 63 organizations.
Unconfirmed: It is unknown whether any exposed credentials were actively exploited in attacks
- 2,539 secrets found in 1,994 public GitHub repos
- 1,122 affected .claude/settings.local.json files
- 379 database passwords and 122 Supabase keys exposed
- Some SSH commands contained root passwords
- One company confirmed its exposed key was live
Impact: Exposed passwords, API keys, and SSH credentials in public GitHub repositories
- 1.Untrack .claude/settings.local.json from Git
- 2.Rotate exposed credentials
- 3.Review allow rules in settings
- Vendors
- Anthropic
- Products
- Claude Code
- Organizations
- Apiiro
From the original article
3 min read at cybersecuritynews.com
Claude Code’s “Yes, and don’t ask again” option can save passwords and API keys inside project settings that later reach public GitHub repositories. Apiiro researchers found 2,539 distinct secrets across 1,994 public repositories, showing how a routine approval can turn private credentials into public data. The research identified 63 affected organizations, mostly software companies.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.