Claude Code

Claude Code Secret Leak: The .claude/settings.local.json Trap and How to Protect Your Repos

Security researchers at Apiiro discovered over 104,000 public .claude/settings.local.json files on GitHub, with 1,122 containing active database passwords and API keys. Learn how the leak happens and how to audit your projects.