investigation
More than 100,000 Claude Code local settings files have been uploaded to public GitHub repositories.
A investigation by Apiiro. Statements are as reported by the cited publishers — not verified by DecisionGateway.
超过 10 万份 Claude Code 本地设置文件被上传至公开的 GitHub 仓库
Discussion
Related claims
After a user selects "是，且不再询问", command text containing secrets may be written into .claude/settings.local.json and then mistakenly committed to repositories.Apiiro · allegationThe Claude Code team is studying preventive measures and considering changes in Claude Code.Boris Cherny · commitmentThe exposure involves 2,539 real credentials across 1,994 code repositories and affects 63 organizations.Apiiro · investigationAI could threaten humanity, a question raised with Anthropic's Claude.gulfnewsuae · statementA SGLang vulnerability exposed user account details in a security breach.NEAR AI · allegationAccording to a filing submitted to the U.S. Securities and Exchange Commission on Tuesday, the Claude chatbot developer set its IPO price range at $70 to $78 per share.financial_express · statement
More claims by Apiiro
After a user selects "是，且不再询问", command text containing secrets may be written into .claude/settings.local.json and then mistakenly committed to repositories.allegationThe exposure involves 2,539 real credentials across 1,994 code repositories and affects 63 organizations.investigationAbout 1,100 of those files contain database passwords, API tokens, private keys or root login information.investigation
All claims by Apiiro