Claude Code's 'Don't Ask Again' Exposes Passwords and Keys in 1,122 Public GitHub Files
Hesamation · x · 2026-11-07
Hesamation urges developers to gitignore their .claude folder, citing The Hacker News report on a Claude Code leak.
- When users pick "Yes, and don't ask again," Claude Code saves the approved command verbatim into .claude/settings.local.json — if it's an exact command, any plaintext password or token in it is stored too.
- Apiiro found 1,122 public copies of the file on GitHub holding at least one secret; one notified company confirmed its key was still live, and researchers reproduced the behavior on the latest models.
- Deleting the file doesn't undo the leak since old versions persist in git history and forks — rotate every credential first, then clean up.
Related event: Claude Code's 'Don't Ask Again' Option Leaks Secrets to GitHub(2 posts)→
More from coding & agent
- AI advisor: enterprises want to cut accounting teams in half, but SAP and dirty master data block agents — 2C_ornot2C · 2026-11-08
- Claude Code sessions talk to each other and coordinate work autonomously, demo by Daniel Miessler — JensHonack · 2026-11-08
- Harness, Loop, Graph: why better prompts won't fix your broken AI agent — 2C_ornot2C · 2026-11-08
- Simon Willison's 'Lethal Trifecta': three conditions that let attackers hijack AI agents — 2C_ornot2C · 2026-11-08
- Ramp CEO: AI-native teams win on ambition, not tools — agents need less uncertainty, more trust — Arindam_1729 · 2026-11-08
- Twig v0.2: open-source macOS menu-bar app to jump straight into Codex worktrees — Dimillian · 2026-11-08