Report finds exposed credentials in public Claude Code settings files

Apiiro reported that 1,122 public copies of Claude Code settings files contained at least one secret, with some credentials also present in repository history and forks. The report says users should rotate affected credentials before removing exposed files.

• When users approve an exact command and choose not to be asked again, Claude Code can save that command in a project settings file, including any password or token typed into it.· 1 source
• Apiiro found 1,122 copies containing secrets among 104,185 copies of the file on public GitHub; the researchers said they did not test whether all the credentials still worked.· 1 source
• The researchers recommend rotating credentials before cleanup, checking repository history, and keeping secrets out of commands saved in allow rules.· 1 source