1 source · latest 36m

Claude Code approval feature exposed 2,539 secrets in 1,994 public GitHub repositories

RESEARCHClaude Coderedteam/daily · 1 source

Severity: Medium
Sources: 1

What happened

Researchers found 2,539 secrets, such as passwords and access keys, exposed in 1,994 public GitHub projects. The leaks came from settings files, saved records and project history used by an AI coding tool. The exposed items included database passwords, cloud credentials and API tokens.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Search your public GitHub repositories for .claude/settings.local.json files and remove any credentials they contain.
Rotate any database passwords, cloud credentials, API tokens or SSH keys that may have been stored in agent configuration files or Git history.

Written by AI from the sources, checked against them

Read the full story at the source