Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

The Hacker News · Saturday, 7 November 2026 at 06:44 (3d ago) · Original article ↗

Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them.

When a user selects "Yes, and don't ask again," Anthropic's AI coding assistant can save the command, word-for-word, including the secret, in a project settings file.

Software security company Apiiro said yesterday that 1,122 public

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Dev

Java News Roundup: TornadoVM, A2A Java, Open Liberty, Open J Proxy, Gradle, EclipseStore

This week's Java roundup for November 2nd, 2026, features news highlighting: point releases of TornadoVM, TornadoInsight, A2A for Java, Gradle and EclipseStore; the November 2026 edition of Open Liberty; the third release candidate of Open J Proxy; the second release candidates…

InfoQ 21m ago

Dev

Microsoft takes three decades to make Sticky Keys less sticky

Windows preview adds a 'don't ask again' option to accessibility prompts, sparing users a trip through Settings

The Register 2h ago

Dev

NASA keeps its PROMISE to raid Mars testbeds for parts

Cut-and-shut trundlebot with spiffy new paint job meant to be headed to the Moon in 2028

The Register 3h ago

Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

More Software & Development

Java News Roundup: TornadoVM, A2A Java, Open Liberty, Open J Proxy, Gradle, EclipseStore

Microsoft takes three decades to make Sticky Keys less sticky

NASA keeps its PROMISE to raid Mars testbeds for parts