PulseAugur
EN
LIVE 17:29:04

Claude Code feature leaks thousands of secrets from GitHub repos

By PulseAugur Editorial · [1 sources] ·

Security researchers at Apiiro discovered over 2,500 secrets, including API keys and passwords, exposed in nearly 2,000 public GitHub repositories. These secrets were inadvertently leaked due to a feature in Anthropic's Claude Code model, which, when instructed to "don't ask again," verbatim approved commands, leading to the exposure. AI

IMPACT Highlights potential security risks in AI code generation tools and the need for robust approval mechanisms.

RANK_REASON Security vulnerability discovered in an AI model's feature.

Read on Mastodon — mastodon.social →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Claude Code feature leaks thousands of secrets from GitHub repos

How we ranked this

Signal score
2 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Security vulnerability discovered in an AI model's feature.
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
safety, product
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Same-day
Cluster formed today. Ranking reflects the current source set at time of score.

Full methodology in our editorial standards.

COVERAGE [1]

  1. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] ·

    🤖 Apiiro found 2,539 secrets (API keys, tokens, passwords) in 1,994 public GitHub repos, leaked by Claude Code's "don't ask again" approval, which writes approv

    🤖 Apiiro found 2,539 secrets (API keys, tokens, passwords) in 1,994 public GitHub repos, leaked by Claude Code's "don't ask again" approval, which writes approved commands verbatim into project settings. 🔗 https:// thehackernews.com/2026/11/clau de-codes-dont-ask-again-file.html …

    LINKS thehackernews.com/…/claude-codes-dont-ask… thehackernews.com/…/clau

RELATED ENTITIES

RELATED TOPICS