---
title: "After a user selects \"是，且不再询问\", command text containing secrets may be written into… — Apiiro — DecisionGateway"
description: "allegation by Apiiro, recorded recently — verbatim quote and source citation."
canonical_url: "https://dgw.tmarket.io/claims/01a1d527-1f67-70fa-bfaa-83e9a9dca85b"
meta:
  "og:description": "allegation by Apiiro, recorded recently — verbatim quote and source citation."
  "og:image": "https://dgw.tmarket.io/og.jpg"
  "og:image:alt": "White network of connected nodes crossed by a timeline on black"
  "og:image:height": "1024"
  "og:image:width": "1024"
  "og:title": "After a user selects \"是，且不再询问\", command text containing secrets may be written into… — Apiiro — DecisionGateway"
  "twitter:image": "https://dgw.tmarket.io/og.jpg"
---

> Index of every page on this site: [llms.txt](https://dgw.tmarket.io/llms.txt)

allegation

# **After a user selects "是，且不再询问", command text containing secrets may be written into .claude/settings.local.json and then mistakenly committed to repositories.**

A allegation by [**Apiiro**](https://dgw.tmarket.io/actors/01a1d527-1f07-7123-b4a5-8dceeb23750b). Statements are as reported by the cited publishers — not verified by DecisionGateway.

> *用户选择“是，且不再询问”后，包含密钥的命令原文可能被写入 .claude/settings.local.json，随后被误提交到仓库*

channelpanewsPublished 2026-11-10 [ Read source](https://t.me/channelpanews/185528)

[**Apiiro dossier **](https://dgw.tmarket.io/actors/01a1d527-1f07-7123-b4a5-8dceeb23750b)

## **Discussion**

## **Related claims**

[**More than 100,000 Claude Code local settings files have been uploaded to public GitHub repositories.**Apiiro · investigation](https://dgw.tmarket.io/claims/01a1d527-1f32-7dd8-b2a5-a4713bc9b066) [**Because authentication checks in the Repository commits API are insufficient, a remote unauthenticated attacker can read arbitrary files on the server, including configurations, tokens, keys and credentials.**Turan Security xavfsizlik byulleteni · allegation](https://dgw.tmarket.io/claims/01a1d0dd-4de3-778f-8b36-f7b85f016406) [**xAI simply ignored the warning.**post author · allegation](https://dgw.tmarket.io/claims/01a1d7f9-2d7c-7cc3-a8bc-f363fc713f28) [**A SGLang vulnerability exposed user account details in a security breach.**NEAR AI · allegation](https://dgw.tmarket.io/claims/01a1d471-841e-759b-bbf5-ae168f103935) [**AI development should be paused.**Democratic congresswoman · commitment](https://dgw.tmarket.io/claims/01a1ce72-7a3f-7841-90f1-8315acd14421) [**WAF and REST API request logs should be checked.**turansecurity · commitment](https://dgw.tmarket.io/claims/01a1d0d9-d41c-7c33-821a-780a008bef84)

## **More claims by Apiiro**

[**The exposure involves 2,539 real credentials across 1,994 code repositories and affects 63 organizations.**investigation](https://dgw.tmarket.io/claims/01a1d527-1f52-79af-9ea7-afe7e1830fb0) [**About 1,100 of those files contain database passwords, API tokens, private keys or root login information.**investigation](https://dgw.tmarket.io/claims/01a1d527-1f42-7bc1-a8a2-cd61c8a18672) [**More than 100,000 Claude Code local settings files have been uploaded to public GitHub repositories.**investigation](https://dgw.tmarket.io/claims/01a1d527-1f32-7dd8-b2a5-a4713bc9b066)

[All claims by Apiiro](https://dgw.tmarket.io/claims?claimant_id=01a1d527-1f07-7123-b4a5-8dceeb23750b)

[All claims](https://dgw.tmarket.io/claims)

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://dgw.tmarket.io/#website","@type":"WebSite","description":"Decisions, events and falsifiable forecasts from 4,000+ Telegram channels — every claim cited. Read free.","name":"DecisionGateway","url":"https://dgw.tmarket.io/","publisher":{"@id":"https://dgw.tmarket.io/#identity"}},{"@id":"https://dgw.tmarket.io/claims/01a1d527-1f67-70fa-bfaa-83e9a9dca85b#webpage","@type":"WebPage","description":"allegation by Apiiro, recorded recently — verbatim quote and source citation.","name":"After a user selects \"是，且不再询问\", command text containing secrets may be written into… — Apiiro — DecisionGateway","url":"https://dgw.tmarket.io/claims/01a1d527-1f67-70fa-bfaa-83e9a9dca85b","breadcrumb":{"@id":"https://dgw.tmarket.io/claims/01a1d527-1f67-70fa-bfaa-83e9a9dca85b#breadcrumb"},"isPartOf":{"@id":"https://dgw.tmarket.io/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://dgw.tmarket.io/claims/01a1d527-1f67-70fa-bfaa-83e9a9dca85b"]}]},{"@id":"https://dgw.tmarket.io/#identity","@type":"Organization","name":"DecisionGateway","url":"https://dgw.tmarket.io"},{"@id":"https://dgw.tmarket.io/claims/01a1d527-1f67-70fa-bfaa-83e9a9dca85b#breadcrumb","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","name":"Home","item":"https://dgw.tmarket.io","position":1},{"@type":"ListItem","name":"Claims","item":"https://dgw.tmarket.io/claims","position":2},{"@type":"ListItem","name":"After a user selects \"是，且不再询问\", command text containing…","position":3}]},{"@id":"https://dgw.tmarket.io/claims/01a1d527-1f67-70fa-bfaa-83e9a9dca85b#/schema/quotation/1","@type":"Quotation","dateCreated":"2026-11-10","isBasedOn":"https://t.me/channelpanews/185528","text":"用户选择“是，且不再询问”后，包含密钥的命令原文可能被写入 .claude/settings.local.json，随后被误提交到仓库","url":"/claims/01a1d527-1f67-70fa-bfaa-83e9a9dca85b","spokenByCharacter":{"@type":"Person","name":"Apiiro","@id":"/actors/01a1d527-1f07-7123-b4a5-8dceeb23750b"}}]}
```

## Sitemap

See the full [sitemap](https://dgw.tmarket.io/sitemap.md) for all pages.