# Developer Tool Leak Exposes Sensitive Credentials on Public Repositories Anthropic's Claude Code tool inadvertently uploads local configuration files containing plain-text passwords to GitHub. - **Source:** [ANSA – Top News](https://www.ansa.it) - **Published:** 2026-11-10 - **Topic:** [technology](https://brifing.si/c/technology) - **Original article:** - **On Brifing:** https://brifing.si/s/b0dd463b-e596-458e-a113-fc14412d570f ## Automated Tool Security Flaw Security researchers at Apiiro identified a critical vulnerability within Claude Code, an AI-powered assistant for software developers created by Anthropic. The tool inadvertently exposes sensitive credentials, including passwords and service keys, by saving them into local configuration files that are subsequently uploaded to public GitHub repositories without proper protection. ## Mechanism of Data Exposure The issue stems from a feature designed to streamline developer workflows by bypassing repeated confirmation prompts. When users authorize operations, the software stores these decisions in local files. If users include passwords or service tokens in their commands, the tool saves these sensitive strings directly into the same configuration documents. ## Syncing Errors Cause Leaks While these configuration files are intended to remain local, security experts note that standard safeguards often fail during project migration. When developers copy projects to new devices or reconfigure settings, the files are frequently pushed to public platforms. This automatic synchronization bypasses intended privacy restrictions, leaving private data exposed online. ## Scale of the Incident The investigation by Apiiro uncovered over one hundred thousand instances of configuration documents being uploaded to public domains. Among these, researchers identified more than one thousand specific cases where actual passwords and corporate credentials were clearly visible. This widespread exposure highlights significant risks for organizations utilizing AI-assisted coding tools today. ## Persistence of Exposed Data Once sensitive information is pushed to a public repository, the data remains accessible even if the original file is deleted by the user. Because GitHub repositories are frequently forked or cloned by other developers, these credentials persist in secondary copies, making complete remediation difficult for affected organizations and individual software engineers. ## Anthropic Response and Mitigation Anthropic has acknowledged the security flaw and is currently developing a technical solution to prevent future unauthorized uploads. The company advises developers to implement rigorous scanning tools to detect and remove sensitive information from their project directories before pushing code to any public or shared software development platforms online. ## Broader Security Implications This incident underscores the inherent risks of integrating AI assistants directly into local development environments. As these tools gain deeper access to system files and user commands, the potential for accidental data leakage increases. Developers must balance the convenience of automated coding features with strict adherence to secure configuration management practices. ## Best Practices for Developers To mitigate such risks, developers should utilize environment variables or dedicated secret management services instead of hardcoding credentials. Regularly auditing repository contents for sensitive data remains essential. Moving forward, users of AI coding assistants must remain vigilant regarding which local files are being tracked and synchronized by their development tools. ## Sources covering this story - https://www.ansa.it/canale_tecnologia/notizie/cybersecurity/2026/11/10/sicurezza-le-password-salvate-sul-computer-finiscono-sui-siti-pubblici_e31540bc-14de-4b69-9e34-e99ebd60bb25.html — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._