Claude Code exposed passwords due to auto-approval feature

The company Apiiro has documented a leak of sensitive data via the development tool from Anthropic. The 'Don't Ask Again' feature in the assistant led to the publication of credentials in the public domain.

During their research, experts discovered 1,122 public files on GitHub containing compromised passwords and access keys. The issue arose because the autonomous agent was transferring secret data into repositories without further prompts to the developer.

The incident demonstrated vulnerabilities in security systems when using autonomous coding tools. Developers are advised to audit their repositories and disable automatic operation confirmation to prevent such leaks.