TechTrending across 2 sourcesSlashdot1h ago
Claude Code's 'Don't Ask Again' File Exposes Passwords and Keys
Claude Code's 'Don't Ask Again' File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
TL;DRClaude Code's settings file leaked API keys and passwords in 1,122 public GitHub repos.
Why it matters: Developers may have inadvertently exposed credentials, risking account compromise and unauthorized API access.
Be careful with the file .claude/settings.local.json, warns The Hacker News: Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects "Yes, and don't ask…
Read full articleSource: Slashdot · Opens in new tab