Back to Latest SignalTHE HACKER NEWS / SECURITY

Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

Source: The Hacker News ·

Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects "Yes, and don't ask again," Anthropic's AI coding assistant can save the command, word-for-word, including the secret, in a project settings file. Software security company Apiiro said yesterday that 1,122 public

Sources

On Bluesky

  • Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...

    Ninja Owl (@ninjaowl.ai) Nov 7, 2026 · 2 likes · 2 reposts

  • 🖲️ #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub Leer Más / Read More...

    TierraSapiens (@tierrasapiens.bsky.social) Nov 7, 2026

  • Claude Codeは、ユーザーが「再度確認しない」を選択すると、APIキーなどの機密情報をプロジェクト設定ファイルに保存し、GitHub上の1122の公開リポジトリで漏洩する脆弱性があった。

    tec_acc (@postac001.bsky.social) Nov 7, 2026

Related on Frontier