Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can…
Hnrss.Org 10 versions
-
1 new sentence, beginning: “Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL:…”
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL: https://news.ycombinator.com/item?id=50407882 Points: 601 # Comments: 408
-
1 new sentence, beginning: “Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL:…”
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL: https://news.ycombinator.com/item?id=50407882 Points: 594 # Comments: 403
-
1 new sentence, beginning: “Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL:…”
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL: https://news.ycombinator.com/item?id=50407882 Points: 579 # Comments: 391
-
1 new sentence, beginning: “Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL:…”
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL: https://news.ycombinator.com/item?id=50407882 Points: 543 # Comments: 385
-
1 new sentence, beginning: “Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL:…”
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL: https://news.ycombinator.com/item?id=50407882 Points: 507 # Comments: 370
-
1 new sentence, beginning: “Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL:…”
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL: https://news.ycombinator.com/item?id=50407882 Points: 470 # Comments: 331
-
1 new sentence, beginning: “Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL:…”
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL: https://news.ycombinator.com/item?id=50407882 Points: 434 # Comments: 292
-
1 new sentence, beginning: “Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL:…”
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL: https://news.ycombinator.com/item?id=50407882 Points: 373 # Comments: 258
- 1 earlier version not shown
-
Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
Article URL: https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again Comments URL: https://news.ycombinator.com/item?id=50407882 Points: 206 # Comments: 143
Versions are compared on the headline and summary the publisher puts in their feed. An edit to the body of an article that leaves both untouched will not appear here.
Why am I seeing this Single-sourced — only Feedburner has this
Only Feedburner has this. It is here on that single source, so read it as one outlet's reporting until somebody else confirms it.
Single-sourced. Hacker News also has it, but tier-3 aggregators never count toward corroboration — they can show something is circulating, never that it is true.
Link-outLink-out, because only one organisation carries it and no first-party source is on it. Link-out means we point at the publisher and say nothing of our own.
| Factor | Weight | Score | Contribution | Where it came from |
|---|---|---|---|---|
| Corroborationleads | 0.35 | 0.39 | +0.135 41% | 1 independent org on the story. Tier-3 aggregators never corroborate — they can show something is circulating, never that it is true. |
| Source trust | 0.25 | 0.36 | +0.089 27% | Feedburner is the highest-trust source on this story. Trust is taken from the best source, not averaged. |
| Pickup rate | 0.20 | 0.00 | +0.000 0% | One counted organisation, so there is no spread to measure — nothing has picked this up to set a rate. |
| Freshness | 0.20 | 0.53 | +0.106 32% | Halves every 10 hours from the newest item on the story. This is the only factor that rewards a story for nothing more than being recent. |
Corroboration counts distinct organisations, once each, and only from tiers 1 and 2 — Hacker News appears on this story and counts for nothing. Freshness halves every 10 hours, so this ranking is a snapshot and will differ at the next build.
What happened
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects "Yes, and don't ask again," Anthropic's AI coding assistant can save the command, word-for-word, including the secret, in a project settings file. Software security company Apiiro said yesterday that 1,122 public
How this story arrived
Ordered by when each source was first observed, which is what the velocity figure is computed from. Publishers backdate; observed order does not.
Overclock clusters coverage from independent sources and grades it automatically. The figures above are computed, not editorial. This page summarises and links to reporting by the outlets named — follow the links for the original work.