AIQB
TutorialsOrdinary

Don't Ask Again, Publish Forever: How a Claude Code Permission File Leaked 2,539 Secrets to GitHub

Source: DEV Community·
Claude

Summary

On November 2, 2026, a security researcher sent an uncomfortable email to a database vendor. The message told the company that its own admin-level cloud API key
CategoryAI Tutorials & Practice
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-23c38b9faa3e9ac339e1b7d9
Read original source ↗More Tutorials

Related stories

Matched by category, entity tags and source

TutorialsOrdinary
Claude Code reads AGENTS.md now, but only when CLAUDE.md is missing
Claude Code shipped AGENTS.md support on September 18, 2026. The changelog line for 2.1.277 is one...
Source: DEV Community · Claude
TutorialsOrdinary
How I made "jump to message" work in ChatGPT, Claude and Gemini
I'm a third-year student, and a lot of my studying and project work happens in AI chats. The chats...
Source: DEV Community · ChatGPT / Claude / Gemini
TutorialsOrdinary
How I used parallel Claude Code agents to write hundreds of Chinese working lives
My side project is a game I'm building. This is the side project of that side project. One Job, One...
Source: DEV Community · Claude
TutorialsOrdinary
The Channel Nobody's Watching: MCP Leaks, Poisoned Skill Files, and a Live Agent Incident
MCP leak attacks, poisoned skill files, a live Claude CTF incident, and new runtime guardrails — this week's verified AI security research.
Source: DEV Community · Claude
TutorialsOrdinary
Audit Claude Code's Approval File Before Secrets Reach GitHub
A command approval can outlive the command. If a coding agent remembers an approved command by saving...
Source: DEV Community · Claude
TutorialsOrdinary
Does Static Typing Reduce AI's Bugs? I Had Claude Code Build the Same Git Clone Three Times Each in TypeScript and JavaScript
A follow-up to "Which Programming Language Is Best for Claude Code?": at a few thousand lines, the gap between TypeScript and JavaScript mostly disappeared.
Source: DEV Community · Claude
TutorialsOrdinary
Stop telling agents not to do dangerous things. Remove the capability instead.
In April 2026, a Cursor agent running Claude Opus 4.6 deleted a startup's production database. The...
Source: DEV Community · Claude / Cursor
TutorialsOrdinary
Thirty minutes in a disposable Mac
A hard 30-minute Claude Code session in a disposable Mac produced a retro screensaver site. Play the demo and inspect the original run evidence.
Source: DEV Community · Claude
TutorialsOrdinary
Agent memory: how Claude repairs wrong notes with dreaming
Agent memory can preserve mistakes. Anthropic's transcript-backed dreaming repairs notes, while contract-page ownership and exact quotations protect facts.
Source: DEV Community · Claude
TutorialsOrdinary
I Let Three AI Agents Run an Incident. The Most Useful Thing They Did Was Refuse Me.
Building a human-gated incident team on Switch, with Claude Code agents working in Mattermost and...
Source: DEV Community · Claude