Claude Code Configuration File Leak Exposes 2,539 Real Credentials

Over 100,000 local configuration files for Claude Code have been uploaded to a public GitHub repository, with approximately 1,100 containing database passwords, API tokens, private keys, or root login information, affecting 2,539 real credentials across 1,994 code repositories and impacting 63 organizations. When users select "Yes, and don't ask again," the command text containing the keys may be written to .claude/settings.local.json and subsequently mistakenly committed to the repository. The Claude Code team is researching preventive measures and considering integrating a key scanning feature into Claude Code.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.