Claude Code is accidentally exposing secrets all over GitHub

AI security researchers discovered that Claude Code is leaking sensitive information, including database passwords and API tokens, on public GitHub instances. This occurs due to an oversight in how its settings files, which store user-approved commands, are handled and sometimes accidentally uploaded despite .gitignore settings. Although Anthropic is investigating, a team member noted that these files should not be committed to source control.