Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

Summary: Apiiro found 1,122 public copies of Claude Code's .claude/settings.local.json file on GitHub holding at least one secret, 1,379 secrets in total, after users chose "Yes, and don't ask again" and the tool saved the full command in plain text. Of those secrets, 379 are database passwords, 43 are SSH logins, 42 are GitHub, GitLab and npm tokens, and 23 are AWS keys, and every file with a secret was still on its repository's default branch as of Monday.
Key Takeaway: More than a third of the exposed secrets open a database directly, including the owner password of a medical-records database and a database vendor's admin-level cloud key, and in half the affected repositories the file had sat there for at least 217 days. Deleting the file does not undo the leak, because older versions stay in git history and in 211 forks of 74 repositories that carry the same secrets.

Read the original at The Hacker News ↗