Researchers from Apiiro have identified a leak of sensitive information from Claude Code on public GitHub repositories. The issue arises from how user approvals for automated shell commands are stored in local settings files, which can include sensitive data such as passwords and API tokens. While this is not a major security concern if the settings file remains local, it raises awareness about potential exposure risks. Anthropic, the developer of Claude Code, indicates that these settings files are typically excluded from public sharing through a global .gitignore list.
Key facts
- Claude Code is leaking sensitive information on GitHub due to settings file handling.
- Thousands of secrets, including passwords and API tokens, were discovered.
- User approvals for commands are stored in a local settings file.
- The settings file can include sensitive information if not properly managed.
- Anthropic states the settings file is added to the global .gitignore list.
A short AI summary in our own words. The reporting belongs to Ars Technica; we don't reproduce it.