AI security researchers at Apiiro discovered that Claude Code settings files uploaded to public GitHub repositories have exposed thousands of secrets, including database passwords, API tokens, and root logins. The leak occurs because user approvals for automated shell commands containing sensitive i