Threat
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
First reported thehackernews.com
Page published
Earliest dated coverage: 7 Nov 2026 · First observed: 7 Nov 2026 · Latest dated coverage: 7 Nov 2026
Coverage timeline
Single-source incident — one report is available.
Why it matters
Claude Code users should rotate exposed credentials and audit repository history because saved command approvals can turn local permission settings into public secret leaks.
Apiiro reported that 1,122 public copies of Claude Code’s .claude/settings.local.json contain secrets because selecting “Yes, and don’t ask again” can save approved commands verbatim, including passwords and API keys. Researchers did not test the credentials, but one notified company confirmed its key had been live; deleting the file does not remove secrets from Git history or forks.