Anthropic’s AI coding assistant Claude Code saves approved commands, including sensitive passwords and API keys, verbatim into project configuration files when users select the ‘Don’t Ask Again’ option. Research by Apiiro reveals that 1,122 public GitHub repositories currently expose these credentials, presenting immediate security risks for affected developers and organizations.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →