International
The Morning Dev

Only the news worth knowing

‹
 
A64/100

Incident · high

Claude Code "Don't Ask Again" approvals leak passwords and keys to public GitHub repositories

Tier A · Patch today – Before you go home

Who’s exposed: Developers using Claude Code's "Don't Ask Again" option who commit approval files to public GitHub repositories

Tier A because: Core infrastructure or popular tool AND secrets exposed

Reach

Attack

Damage

Fix

Popular tool · Secrets exposed

What to do

  1. Search your repositories for the Claude Code "don't ask again" approval file and remove any credentials stored in it.
  2. Rotate any passwords or API keys that were typed into approved Claude Code commands and may have been committed publicly.

The Brief

  • Passwords and API keys typed into commands approved in Claude Code can be saved word-for-word when a user selects "Yes, and don't ask again".
  • The saved approvals are sitting in 1,122 public copies on GitHub, where anyone can read them.
  • The reporting refers to Anthropic's AI coding assistant, Claude Code.

Why it matters

Developers who approved commands containing credentials may have leaked those secrets into public repositories, which means exposed keys should be treated as compromised.

The checklist behind the tier

Checklist · 3 of 10 yes
YesHits tech teamsClaude Code is a developer coding tool used by engineering teams.
NoCore infrastructureA single AI coding assistant product, not shared core infrastructure like OpenSSH or GitHub.
YesPopular toolClaude Code is a widely used mainstream AI coding assistant from Anthropic.
NoExploited in the wildThe Hacker News reports exposed secrets in public repos, not observed attacks using the flaw.
NoPublic exploitSources describe the exposure only; no exploit code or step-by-step PoC is reported.
NoRemote, no loginExposure arises from users approving commands; no unauthenticated remote access is described.
NoFull takeoverSources describe credential exposure, not code execution, root access or account takeover.
YesSecrets exposedThe Hacker News: passwords and API keys typed into approved commands sit in 1,122 public GitHub copies.
NoSupply chainNo compromise of a legitimate package, update, build pipeline or signing key is reported.
NoNo fix yetNeither source states that a fix is unavailable or incomplete.

Timeline

  1. Reported that passwords and keys from Claude Code "Don't Ask Again" approvals are exposed in 1,122 public GitHub copies

  2. The Hacker News

    Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

  3. Hacker News: Front Page

    Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

  4. DEV Community: ai

    Claude Code's "Don't Ask Again" Leaked Developers' Secrets to Public GitHub — Explained Honestly

  5. DEV Community: ai

    Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

Full coverage · 4 sources

First seen · 4 sources · Full story page · How tiers are decided