AINewsnow

Claude Code's 'Don't Ask Again' file leaked passwords and API keys in 1,122 public GitHub repos

Secrets typed into shell commands approved via Claude Code's 'Yes, and don't ask again' option were saved to .claude/settings.local.json and pushed to GitHub, exposing 1,379 secrets across 1,122 public repositories.

Read the full story at The Hacker News (security) ↗

Timeline · 4 reports

  1. 2026-11-07 23:02 · DEV Community — AI
    Claude Code's 'Don't Ask Again' Saved Secrets in 1,122 Public Files. 215 Beat Both Scanners
  2. 2026-11-07 20:45 · Hacker News Front Page
    Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
  3. 2026-11-07 17:06 · DEV Community — AI
    Claude Code's don't-ask-again file held 1,379 secrets in 1,122 public repos: what settings.local.json really saves
  4. 2026-11-07 06:44 · The Hacker News (security)
    Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

More stories

  1. Claude Code privacy bug exposed users' email addresses to third parties — DEV Community — AI
  2. Claude Code drives wave of community-built apps, tools and workflows — DEV Community — AI
  3. Anthropic launches Claude Personal Finance in the US with read-only bank access — Engadget
  4. Perplexity launches Teammates, always-on AI agents for ongoing work — The Verge AI
  5. Anthropic simplifies repo setup for Claude Code cloud sessions — Anthropic (X)
  6. Anthropic launches Personal Finance beta in Claude for US users — Anthropic (X)
  7. Anthropic tests Claude as an agent in two EVE online games — Anthropic News
  8. Developers share techniques for running parallel Claude Code agents and sessions — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →