{"id":7000,"date":"2026-11-09T07:24:46","date_gmt":"2026-11-09T07:24:46","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github"},"modified":"2026-11-09T07:24:46","modified_gmt":"2026-11-09T07:24:46","slug":"claude-code-secrets-leak-github","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/claude-code-secrets-leak-github","title":{"rendered":"Claude Code Feature Leaks Developer Secrets to GitHub"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Anthropic\u2019s push for friction-free AI development has created a serious supply chain vulnerability. A convenience feature in its new Claude Code assistant leaked thousands of developer secrets onto public GitHub repositories. Security researchers found that a simple &#8220;don&#8217;t ask again&#8221; prompt stored plaintext passwords, AWS keys, and SSH logins in local configuration files, exposing the collision between autonomous AI agents and standard enterprise security controls.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>The incident:<\/strong> Claude Code&#8217;s &#8220;Yes, and don&#8217;t ask again&#8221; permission feature saved full, unredacted shell commands containing live credentials directly to a local <code>.claude\/settings.local.json<\/code> file.<\/li><li><strong>The exposure:<\/strong> Research by Apiiro found over 2,500 secrets\u2014including database passwords, AWS access keys, and Supabase service-role keys\u2014exposed across nearly 2,000 public GitHub repositories.<\/li><li><strong>The scanner blindspot:<\/strong> Standard enterprise secret-scanning tools reportedly missed hundreds of these files, leaving deep vulnerabilities in git histories and repository forks.<\/li><li><strong>The AI infra reality:<\/strong> The race to build fully autonomous, frictionless AI coding agents is fundamentally breaking traditional developer security protocols.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When developers use Anthropic&#8217;s Claude Code, the terminal assistant occasionally prompts for permission to execute shell commands. To reduce friction in the development workflow, users can select a &#8220;Yes, and don&#8217;t ask again&#8221; option. Security researchers at Apiiro revealed that clicking this option saves the exact literal command string in plaintext inside a <code>.claude\/settings.local.json<\/code> file. If a developer embedded an API key, database password, or SSH login into that specific shell command, the secret was written directly into the local configuration.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Because this file is stored locally within project directories, developers unknowingly committed it to their public source control. Apiiro\u2019s scans across more than 103,000 public GitHub repositories uncovered 1,122 active configuration files containing at least 1,379 distinct secrets. When researchers expanded the scope to include older file versions, agent logs, and related git artifacts, the exposure ballooned to over 2,500 leaked credentials tied to at least 63 different organizations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Complicating the cleanup, simply deleting the <code>.claude\/settings.local.json<\/code> file or adding it to a global <code>.gitignore<\/code> does not erase the threat. Credentials remain active in commit histories, cached views, and repository forks. Security experts stress that exposed developers must immediately rotate their database passwords, SSH keys, and cloud tokens before attempting to purge the files from their git tracking.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why it matters now<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This incident exposes a fundamental tension in the current AI infrastructure race: the battle between agentic autonomy and enterprise security. Companies like Anthropic, OpenAI, and GitHub are aggressively pushing coding assistants that operate with increasing independence. But eliminating friction-like repetitive permission prompts-often means overriding the very speed bumps that prevent catastrophic security breaches.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For the broader AI ecosystem, this leak is a wake-up call regarding the new attack surfaces created by LLM-powered development tools. The industry is no longer just securing code written by humans; it must now secure the configuration files, agent transcripts, and memory states generated by the AI assistants themselves. The fact that major secret-scanning tools missed hundreds of these exposed Claude Code files indicates that traditional DevSecOps infrastructure has not yet adapted to the bespoke artifacts generated by local AI agents.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As AI models move from simple code autocomplete to orchestrating cloud infrastructure and database migrations natively from the terminal, the blast radius of a compromised local settings file scales exponentially. Enterprise CTOs and DevSecOps teams are now forced to build fresh governance models for AI tooling, treating every AI-assistant configuration file as a high-risk vector that requires distinct scanner tuning and strict repository-level ignore rules.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Who is most affected<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The immediate fallout impacts developers, startups, and open-source maintainers who actively beta-tested or deployed Claude Code in public GitHub environments. However, the downstream risk hits DevSecOps and cloud infrastructure teams who must now audit git histories for leaked tokens that automated scanners may have missed.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Stakeholder<\/th><th>Impact<\/th><th>Why<\/th><\/tr><\/thead><tbody><tr><td><strong>Claude Code Users<\/strong><\/td><td>High risk of hijacked accounts or infrastructure.<\/td><td>Plaintext API keys, AWS tokens, and database passwords were inadvertently committed to public repositories via unredacted shell commands.<\/td><\/tr><tr><td><strong>Enterprise DevSecOps<\/strong><\/td><td>Blindspots in secret detection and compliance.<\/td><td>Legacy secret-scanning tools failed to identify AI-generated <code>.claude\/<\/code> configuration files as sensitive targets, leaving active secrets exposed.<\/td><\/tr><tr><td><strong>Anthropic &amp; AI Vendors<\/strong><\/td><td>Pressure to redesign permission logic.<\/td><td>The incident forces AI companies to rethink how local agents store state and manage context without caching sensitive user data in plaintext.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u270d\ufe0f About the analysis<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This is an independent, research-based i10x analysis intended for DevSecOps teams, CTOs, and AI infrastructure builders navigating the security implications of autonomous coding agents.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/www.itnews.com.au\/news\/dont-ask-again-in-anthropics-claude-code-leaks-developer-secrets-630203\" target=\"_blank\" rel=\"noreferrer noopener\">\u201cDon\u2019t ask again\u201d in Anthropic\u2019s Claude Code leaks developer secrets<\/a><\/li><li><a href=\"https:\/\/aviatrix.ai\/threat-research-center\/claude-code-dont-ask-again-settings-local-json-passwords-keys-1122-github-2026\/\" target=\"_blank\" rel=\"noreferrer noopener\">Claude Code &#8216;Don&#8217;t Ask Again&#8217; Bug Exposes 1,122 GitHub Credential Files | Aviatrix Threat Research<\/a><\/li><li><a href=\"https:\/\/www.winzheng.com\/en\/article\/claude-code-dont-ask-again-secrets-leaked-github\" target=\"_blank\" rel=\"noreferrer noopener\">Claude Code&#8217;s \u201cDon&#8217;t Ask Again\u201d Feature Caused 2,539 Secrets to Flow into Public GitHub Repositories<\/a><\/li><li><a href=\"https:\/\/www.aiplanetx.com\/p\/claude-code-files-exposed-api-keys\" target=\"_blank\" rel=\"noreferrer noopener\">Claude Code Files Exposed API Keys<\/a><\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udd2d i10x Perspective<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Claude Code leak is not just an oversight; it is a structural growing pain in the evolution from AI copilots to autonomous AI agents. As models gain the ability to execute complex terminal commands, the very mechanics meant to keep them seamlessly integrated are inadvertently creating highly concentrated, plain-text vulnerabilities. Until AI infrastructure can securely abstract credential management away from local prompt histories and agent memory, the push for &#8220;frictionless&#8221; AI development will remain a massive liability for enterprise deployment.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Anthropic&#8217;s Claude Code assistant leaked thousands of developer secrets when its friction-reducing &#8216;Yes, and don&#8217;t ask again&#8217; permission option stored unredacted shell commands containing live credentials in local configuration files.<\/p>\n","protected":false},"author":2,"featured_media":6999,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"28"},"categories":[12,28],"tags":[],"companies":[39],"products":[51],"class_list":["post-7000","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-policy-safety","category-security-defense","company-anthropic","product-claude"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Claude Code Leak Exposes 2500 Secrets in GitHub Repos<\/title>\n<meta name=\"description\" content=\"Anthropic&#039;s Claude Code &#039;don&#039;t ask again&#039; feature saved plaintext credentials in local files, exposing over 2,500 secrets across public GitHub\u2026\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Claude Code Leak Exposes 2500 Secrets in GitHub Repos\" \/>\n<meta property=\"og:description\" content=\"Anthropic&#039;s Claude Code &#039;don&#039;t ask again&#039; feature saved plaintext credentials in local files, exposing over 2,500 secrets across public GitHub\u2026\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-09T07:24:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/claude-code-secrets-leak-github-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-code-secrets-leak-github#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-code-secrets-leak-github\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"Claude Code Feature Leaks Developer Secrets to GitHub\",\"datePublished\":\"2026-11-09T07:24:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-code-secrets-leak-github\"},\"wordCount\":874,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-code-secrets-leak-github#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/claude-code-secrets-leak-github-title.webp\",\"articleSection\":[\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-09T07:24:46+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-code-secrets-leak-github\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-code-secrets-leak-github\",\"name\":\"Claude Code Leak Exposes 2500 Secrets in GitHub Repos\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-code-secrets-leak-github#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-code-secrets-leak-github#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/claude-code-secrets-leak-github-title.webp\",\"datePublished\":\"2026-11-09T07:24:46+00:00\",\"description\":\"Anthropic's Claude Code 'don't ask again' feature saved plaintext credentials in local files, exposing over 2,500 secrets across public GitHub\u2026\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-code-secrets-leak-github#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-code-secrets-leak-github\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-code-secrets-leak-github#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/claude-code-secrets-leak-github-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/claude-code-secrets-leak-github-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Illustration: i10X\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-code-secrets-leak-github#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Claude Code Feature Leaks Developer Secrets to GitHub\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Claude Code Leak Exposes 2500 Secrets in GitHub Repos","description":"Anthropic's Claude Code 'don't ask again' feature saved plaintext credentials in local files, exposing over 2,500 secrets across public GitHub\u2026","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github","og_locale":"en_US","og_type":"article","og_title":"Claude Code Leak Exposes 2500 Secrets in GitHub Repos","og_description":"Anthropic's Claude Code 'don't ask again' feature saved plaintext credentials in local files, exposing over 2,500 secrets across public GitHub\u2026","og_url":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github","og_site_name":"i10X News","article_published_time":"2026-11-09T07:24:46+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/claude-code-secrets-leak-github-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"Claude Code Feature Leaks Developer Secrets to GitHub","datePublished":"2026-11-09T07:24:46+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github"},"wordCount":874,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/claude-code-secrets-leak-github-title.webp","articleSection":["Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-09T07:24:46+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github","url":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github","name":"Claude Code Leak Exposes 2500 Secrets in GitHub Repos","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/claude-code-secrets-leak-github-title.webp","datePublished":"2026-11-09T07:24:46+00:00","description":"Anthropic's Claude Code 'don't ask again' feature saved plaintext credentials in local files, exposing over 2,500 secrets across public GitHub\u2026","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/claude-code-secrets-leak-github-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/claude-code-secrets-leak-github-title.webp","width":1344,"height":768,"caption":"Illustration: i10X"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/claude-code-secrets-leak-github#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"Claude Code Feature Leaks Developer Secrets to GitHub"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7000","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=7000"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7000\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/6999"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=7000"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=7000"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=7000"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=7000"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=7000"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}