Skip to content
NewA calmer, faster ZeroHour
StoryAI safety & securityhigh

Claude Code Don't Ask Again Leaks Secrets in Public GitHub Files

4 sources · 5 articlesFirst reported Updated ()5
What's new

November 9: GBHackers report examines 1,105 repositories and notes 539 with coauthored commits; researchers did not test credentials.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Claude Code's persistent approval exposes credentials in public GitHub .claude files.

Claude Code's "Yes, and don't ask again" option saves shell commands containing credentials to .claude/settings.local.json files that can be committed to public GitHub repositories. Apiiro researchers scanned 104,185 public copies and found 1,379 secrets in 1,122 files (The Hacker News) as well as 2,539 distinct secrets across 1,994 repositories in 63 organizations (Cyber Security News, GBHackers). Historical git versions contain an additional 734 secrets. One organization confirmed a live exposed key. The file is added to git excludes rather than .gitignore so the protection does not travel with the repo.

Key facts
  • 1,379 secrets in 1,122 public .claude files
  • 2,539 distinct secrets in 1,994 repositories
  • 734 secrets in historical versions
  • Affects 63 organizations
  • One confirmed live exposed key
  • Scanned 104,185 public copies
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • The Hacker NewsComparison of 16 coding agents; only Claude saves full approved command by default; 379 database passwords, 23 AWS keys
  • Cyber Security News379 database passwords and 122 Supabase keys; SSH commands with root passwords
  • GBHackersExamples including Azure PostgreSQL production password and Square token; 539 coauthored commits in 1,105 examined repositories
  • Hacker News · AIAffects AI coding agents
Vendors
ClaudeAnthropic
Products
Claude Code
Victims
63 organizations
Organizations
Apiiro
AI models
Opus 5.5Fable 5.1

Coverage

oldest first · one row per article · UTC
  1. · 2d ago The Hacker NewsFirst report

    Claude Code permission file exposes secrets in 1,122 public GitHub copies

    Apiiro found 1,379 secrets, including database passwords and AWS keys; one notified company confirmed a live key.

  2. · 2d ago Cyber Security News

    Claude Code approvals leak passwords and API keys to GitHub

    Apiiro found 2,539 secrets in 1,994 public repositories from routine Claude approvals.

  3. · 2d ago GBHackers

    Claude Code “Don’t Ask Again” Persists Secrets in GitHub Repositories

    Apiiro research exposed 2,539 secrets across 1,994 public GitHub repositories via Claude Code configuration files.

  4. · 1d ago Hacker News · AI

    Claude Code leaks passwords from 1,122 public GitHub files

    Claude Code's 'Don't Ask Again' feature stored and leaked passwords from 1,122 public GitHub repositories.

  5. · 10h ago GBHackers

    Anthropic Claude Code 'Don't Ask Again' exposes 2,539 secrets on GitHub

    Claude Code's persistent approval stores credentials in .claude/settings.local.json files committed to public GitHub repositories.