Media report · AI-ASSISTED BRIEF
Apiiro Finds Thousands of Secrets Leaked via Claude Code Settings Files on GitHub
Report publication · YYSI publication
According to Ars Technica, Security researchers at Apiiro report that Claude Code's local settings file, which can store approved shell commands verbatim, has been uploaded to public GitHub repositories over 100,000 times, with roughly 1,100 files from 63 organizations containing secrets such as API tokens, database passwords and private keys. Anthropic's Boris Cherny said the team is looking into prevention and may add secret scanning.
Related guide
Claude Code settings files leaking secrets: a 5-minute self-check and cleanup checklist: a practical explainer with a read-only self-check, built on this brief’s event.
Source & context
arstechnica.com · Read the original source ↗
This AI-assisted brief attributes information to the linked media report. It is not an official announcement or independent YYSI reporting. Consult the original report and its evidence.