Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

A feature in Claude Code, an AI coding assistant, is inadvertently exposing sensitive information in public GitHub repositories. When users choose to save a command without being asked again, the entire command, including passwords and API keys, is saved in a project settings file. This has resulted in the exposure of secrets in 1,122 public copies on GitHub, according to software security company Apiiro. These saved commands can be read by anyone, potentially compromising security. The issue arises from the way Claude Code handles user-approved commands. Apiiro discovered the problem, highlighting a significant security risk.