AINewsnow

Claude Code settings files expose thousands of secrets on public GitHub

Apiiro researchers found 2,539 real secrets across 1,994 public GitHub repositories, including credentials in Claude Code settings files, git history, shared settings, and agent transcripts, stemming from the "Yes, and don't ask again" permission option.

Read the full story at Ars Technica AI ↗

Timeline · 13 reports

  1. 2026-11-09 17:24 · Ars Technica AI
    Claude Code settings files expose thousands of secrets on GitHub
  2. 2026-11-09 14:18 · DEV Community — AI
    Claude Code's "Don't Ask Again" Secrets: The Git-Exclude Gap, What Scanners Miss, and a Pre-Commit Fix
  3. 2026-11-09 06:22 · DEV Community — AI
    Claude Code Leaked 2,539 Secrets Onto GitHub. I Checked My Own Repos the Same Morning
  4. 2026-11-09 00:04 · DEV Community — Machine Learning
    Apiiro Finds 2,539 Secrets Leaked By Claude Code Users On GitHub
  5. 2026-11-08 18:56 · DEV Community — Machine Learning
    Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
  6. 2026-11-08 18:38 · DEV Community — AI
    The File Claude Code Writes When You Choose "Don't Ask Again"
  7. 2026-11-08 17:13 · DEV Community — AI
    Don't Ask Again, Publish Forever: How a Claude Code Permission File Leaked 2,539 Secrets to GitHub
  8. 2026-11-08 16:45 · DEV Community — AI
    Claude Code's "Don't Ask Again" Leaked Developers' Secrets to Public GitHub — Explained Honestly
  9. 2026-11-08 13:01 · r/ClaudeAI
    If you ever clicked “Yes, and don’t ask again” in Claude Code, check one file before your next push
  10. 2026-11-07 23:02 · DEV Community — AI
    Claude Code's 'Don't Ask Again' Saved Secrets in 1,122 Public Files. 215 Beat Both Scanners
  11. 2026-11-07 20:45 · Hacker News Front Page
    Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
  12. 2026-11-07 17:06 · DEV Community — AI
    Claude Code's don't-ask-again file held 1,379 secrets in 1,122 public repos: what settings.local.json really saves
  13. 2026-11-07 06:44 · The Hacker News (security)
    Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

More stories

  1. Claude Code ecosystem expands from home automation to media generation and shared agent skills — DEV Community — AI
  2. Anthropic must face lawsuit over Claude subscription marketing — Economic Times Tech
  3. Anthropic launches Claude Personal Finance with read-only bank access in the US — Engadget
  4. Anthropic simplifies repo setup for Claude Code cloud sessions — Anthropic (X)
  5. IBM plans to bring Anthropic’s Claude Mythos cyber reasoning into IBM Concert — Mixture of Experts (IBM)
  6. How I Use Cursor and AI Coding Agents to Ship Features That Actually Last in Production — DEV Community — AI
  7. Opinion | Does Claude have a soul? Ask God, not Anthropic. — Washington Post AI
  8. Do Parallel Claude Code Sessions Share a Prompt Cache? Not Across Worktrees — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →