Report
Apiiro finds exposed credentials in 1,122 public Claude Code settings files
Apiiro says Claude Code’s “don’t ask again” option can save passwords in files later published on GitHub.
TLDR
According to VentureBeat, Apiiro found 1,379 distinct credentials in 1,122 public Claude Code settings files. The researchers did not test the credentials, so the findings do not establish successful intrusions. Apiiro recommends checking repository history and rotating exposed credentials. Anthropic’s Boris Cherny said the team was exploring safeguards but announced no specific fix or release date.
Combined views
—
2 Sources, first seen ago

Comments