Researchers discovered that Anthropic's Claude Code "Don't Ask Again" feature has exposed sensitive credentials in 1,122 public GitHub repositories. The vulnerability occurs when developers approve persistent permissions, inadvertently committing API keys, tokens, and passwords to version control. This highlights a critical supply chain risk where AI coding assistants can amplify secret leakage through automated workflows.

Read original