investigation
The exposure involves 2,539 real credentials across 1,994 code repositories and affects 63 organizations.
A investigation by Apiiro. Statements are as reported by the cited publishers — not verified by DecisionGateway.
涉及 1994 个代码库中的 2539 个真实凭据，波及 63 个组织
Discussion
Related claims
About 1,100 of those files contain database passwords, API tokens, private keys or root login information.Apiiro · investigationMore than 100,000 Claude Code local settings files have been uploaded to public GitHub repositories.Apiiro · investigationExploit code has not yet been distributed, but the CVE is confirmed.turansecurity · statementSPH Media was hit by a data breach affecting 9% of its database.biztimes · statementBecause authentication checks in the Repository commits API are insufficient, a remote unauthenticated attacker can read arbitrary files on the server, including configurations, tokens, keys and credentials.Turan Security xavfsizlik byulleteni · allegationThe flaws could potentially expose private data, passwords, and website servers.THnewsupdates · allegation
More claims by Apiiro
After a user selects "是，且不再询问", command text containing secrets may be written into .claude/settings.local.json and then mistakenly committed to repositories.allegationAbout 1,100 of those files contain database passwords, API tokens, private keys or root login information.investigationMore than 100,000 Claude Code local settings files have been uploaded to public GitHub repositories.investigation
All claims by Apiiro