Anthropic is preparing for a $1.5T IPO while its flagship coding agent, Claude Code, casually dumped 2,539 live developer secrets across 1,994 public GitHub repositories.
The mechanism is almost too absurd to be angry at. When an engineer runs a database or API command in the terminal and clicks the innocent "Yes, and don't ask again" option, Claude Code writes the raw command string—plain-text PGPASSWORD, API tokens, and cloud keys included—straight into .claude/settings.local.json. Because it never adds that file to a repository-level .gitignore, the next git push ships your production credentials to the entire internet.
Even worse, Apiiro's research showed that standard regex secret scanners like Gitleaks and TruffleHog missed large chunks of these inline CLI credentials. It is the software equivalent of installing a million-dollar vault door and taping the spare key under the doormat.
Maybe learn how to append a line to .gitignore before pricing a trillion-dollar IPO:)
Originally published on Kürşat Yılmaz Technical Blog
Top comments (0)