Claude Code is accidentally exposing secrets all over GitHub
🤖 AI-generated content — The title and summary were produced automatically by artificial intelligence, without human editorial review.
AI security researchers at Apiiro discovered that Claude Code settings files uploaded to public GitHub repositories have exposed thousands of secrets, including database passwords, API tokens, and root logins. The leak occurs because user approvals for automated shell commands containing sensitive information are saved locally in settings files that are not consistently excluded by repository-level gitignore rules when folders are converted or cloned.
Continue in the app — vote & join in ➔Source: Ars Technica · via ahirlevel.hu