International
The Morning Dev

Only the news worth knowing

‹
 

Security · High impactFan score 64 · Tier A4 sources

Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

Hacker News: Front Page ·

The Brief · written from 4 sources

  • Passwords and API keys typed into commands approved in Claude Code can be saved word-for-word when a user selects "Yes, and don't ask again".
  • The saved approvals are sitting in 1,122 public copies on GitHub, where anyone can read them.
  • The reporting refers to Anthropic's AI coding assistant, Claude Code.

Why it matters

Developers who approved commands containing credentials may have leaked those secrets into public repositories, which means exposed keys should be treated as compromised.

Who’s affected

  • Claude Code users who selected "Yes, and don't ask again"
  • Developers whose repositories contain saved Claude Code approval files

What to do

  1. Search your repositories for the Claude Code "don't ask again" approval file and remove any credentials stored in it.
  2. Rotate any passwords or API keys that were typed into approved Claude Code commands and may have been committed publicly.
Read the full story at apiiro.com ↗

Timeline

  1. Reported that passwords and keys from Claude Code "Don't Ask Again" approvals are exposed in 1,122 public GitHub copies

  2. The Hacker News

    Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

  3. Hacker News: Front Page

    Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

  4. DEV Community: ai

    Claude Code's "Don't Ask Again" Leaked Developers' Secrets to Public GitHub — Explained Honestly

  5. DEV Community: ai

    Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files

Full coverage · 4 sources

How do you feel about this?

0 Comments

    Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files – The Morning Dev