investigation
Apiiro found 2,539 real credentials across 1,994 GitHub repositories, including database passwords and API tokens.
A investigation by Apiiro. Statements are as reported by the cited publishers — not verified by DecisionGateway.
安全公司 Apiiro 发现，1,994 个 GitHub 代码库中存在 2,539 个真实凭据，涉及数据库密码、API Token 等。
Discussion
More claims by Apiiro
After a user selects "是，且不再询问", command text containing secrets may be written into .claude/settings.local.json and then mistakenly committed to repositories.allegationThe exposure involves 2,539 real credentials across 1,994 code repositories and affects 63 organizations.investigationAbout 1,100 of those files contain database passwords, API tokens, private keys or root login information.investigationMore than 100,000 Claude Code local settings files have been uploaded to public GitHub repositories.investigation
All claims by Apiiro