Apiiro uncovers exposed credentials in 1,122 public Claude Code settings files

First reported by The Hacker News at · Updated · 3 sources

Claude Code can preserve entire approved commands, including passwords and API keys, when users choose to skip future approval prompts. Those commands can reach public GitHub repositories through project settings files. Apiiro's broader scans found 2,539 distinct secrets across 1,994 public repositories, exposing credentials beyond the settings files initially identified.

  • Saved commands appeared in .claude/settings.local.json.
  • Cyber Security News reports 63 affected organizations, mostly software companies.

Covered by 3 publishers within 7 hours of the first report.

Reporting3

The Hacker News Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub · info@thehackernews.com (The Hacker News)
Cyber Security News Claude Code’s “Yes, and Don’t Ask Again” Option Can Leak Passwords and API Keys to GitHub · Guru Baran
RuntimeWire Apiiro finds secrets in 1,122 public Claude Code settings files · RuntimeWire Staff

Related

Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers
Yoba attackers use fake ChatGPT and Claude apps to install crypto miners
Malicious AGENTS.md file steers AI coding agent toward rogue npm package
Cursor's Marketplace Hands Developers a Backdoored Claude Code

Topics Anthropic