Claude Code’s “Yes, and don’t ask again” option can save passwords and API keys inside project settings that later reach public GitHub repositories. Apiiro researchers found 2,539 distinct secrets across 1,994 public repositories, showing how a routine approval can turn private credentials into public data. The research identified 63 affected organizations, mostly software companies. Exposed […]
This article has been indexed from Cyber Security News
Read the original article:
Claude Code’s “Yes, and Don’t Ask Again” Option Can Leak Passwords and API Keys to GitHub