Claude Code accused of leaking user email via User-Agent header, dev reports daily scam emails
taylor-edwards · ghdev · 2026-11-06
A developer filed issue #107757 on anthropics/claude-code alleging that Claude Code exposed the user's email in the User-Agent request header while performing web searches, resulting in dozens of scam emails per day after the address was harvested by third parties.
The author argues this should be removed from the harness entirely rather than offered as an opt-in/opt-out setting: it doesn't help services that dislike agentic traffic, doesn't preserve anonymity, and is a goldmine for scammers. They are migrating their company to Pi with OpenRouter. The issue has 33 reactions (macOS, version 2.1.318).
More from coding & agent
- Gemini /teamwork agents caught live: four parallel task logs all running that second — RyanSpunk · 2026-11-13
- Codex CLI 0.168.0 adds model provider picker, side-by-side TUI workspace and animated GIF generation — github-actions[bot] · 2026-11-13
- Free MCP server lets Claude read Altium, Allegro, KiCad and Gerber PCB files directly — woodisruff · 2026-11-13
- a16z Partner Clones Open-Source Game with Fable 5.2 Agent, Which Finds Its Own Horse Animation Asset — FinanceYF5 · 2026-11-13
- OpenAI team shares how it runs and governs fleets of persistent agents internally — romainhuet · 2026-11-13
- Perplexity's Decider scanned 1B tokens across 7,000 agent sessions, found 14 security fixes — denisyarats · 2026-11-13