PulseAugur
EN
LIVE 17:29:05

Anthropic's Claude Code tool leaks user passwords and API keys

By PulseAugur Editorial · [1 sources] ·

A security vulnerability has been discovered in Anthropic's Claude Code tool, where it stores sensitive user commands, including passwords and API keys, in plain text within its configuration file. Security firm Apiiro found over a thousand public copies of this file on GitHub containing various secrets, such as database passwords and AWS digital keys, affecting numerous organizations. The issue is exacerbated because deleting the file does not remove it from Git history, and Anthropic has not yet responded to reports of the flaw. AI

IMPACT Exposes sensitive user credentials, potentially leading to account compromises and data breaches for organizations using the tool.

RANK_REASON Security vulnerability discovered in a specific AI tool.

Read on dev.to — Claude Code tag →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Anthropic's Claude Code tool leaks user passwords and API keys

How we ranked this

Signal score
4 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Security vulnerability discovered in a specific AI tool.
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Same-day
Cluster formed today. Ranking reflects the current source set at time of score.

Full methodology in our editorial standards.

COVERAGE [1]

  1. dev.to — Claude Code tag TIER_1 English(EN) · Hacks.gr ·

    Claude Code tool exposes user passwords and digital keys

    <p>Claude Code stores full user commands in.claude/settings.local.json, including passwords or API keys in plain text when they appear in a command.</p> <p>Apiiro found 1,122 public copies of the file on GitHub containing at least one secret, and 1,379 sensitive items in total.</…

RELATED ENTITIES

RELATED TOPICS