AINewsnow

OpenAI or Anthropic API key exposed in the browser

This story is from 2026-11-05. It is preserved in the archive; the latest stories are on the live feed.

An AI client created with dangerouslyAllowBrowser, or a key behind a VITE_ or NEXT_PUBLIC_ prefix, puts your API key in the page, where anyone can copy it and spend on your account. What you see The OpenAI or Anthropic client is created in a component, with dangerouslyAllowBrowser: true , or the ke…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-11-05 09:40 · DEV Community — AI
    OpenAI or Anthropic API key exposed in the browser

More stories

  1. Claude Code drives wave of community-built apps, tools and workflows — DEV Community — AI
  2. Claude Personal Finance and ChatGPT Finances differ on privacy for bank data — Engadget
  3. OpenAI raises $11 billion at $1.25 trillion valuation — TechCrunch AI
  4. Perplexity launches Teammates, always-on AI agents for ongoing work — The Verge AI
  5. Naver to launch Nvidia-backed AI factory after up to $9 billion Brookfield infrastructure deal — DigiTimes Asia
  6. Three AI vendors restructured usage limits in two weeks: what it means if you pay for AI — DEV Community — AI
  7. How to Choose an AI Agency or Engineering Partner in Morocco (2026 CTO Guide) — DEV Community — AI
  8. I Tried ChatGPT, Claude, and Gemini Without Giving Them My Real Email — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →