ITHome · AI·· 4 days ago
Claude Code credentials leaked, 2539 real credentials found on GitHub
Brief overview
Claude Code exposed database password, API Token and other sensitive credentials to GitHub repository due to improper authorization handling, identifying 2539 real credentials, affecting 63 organizations. Security company Apiiro's research found that over 100,000 local configuration files were uploaded, of which about 1,100 contained confidential data, and the team is studying preventive measures.
Same story1 other outlet also reported this
- Ars Technica · AI··First
Claude Code accidentally leaked GitHub secrets due to a mistake in handling the settings file
- ITHome · AI··+15 h 21 min·Reading now
Claude Code credentials leaked, 2539 real credentials found on GitHub
In order of publication · later reports are added as they appear
Source: ITHome · AI · ithome.com