Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
This investigation demonstrates the tangible security risks and credential leakage vulnerabilities introduced when developers grant autonomous permissions to AI coding agents.
Reported by Hacker News ·
What happened
A blog post by Apiiro reports that a "Don't Ask Again" feature in Claude Code has led to passwords being exposed in 1,122 public files on GitHub. The issue highlights how coding agents can inadvertently leak sensitive credentials into public repositories.
Who it’s about
- Claude Code
- GitHub
- Apiiro