SecurityLead story
Apiiro says Claude Code permission files exposed 1,379 secrets on public GitHub
Commands approved with 'Yes, and don't ask again' are saved in plain text to .claude/settings.local.json, and 1,122 public copies held at least one credential.
Jaeden SchaferEditor in Chief5 min read