Nov 8: Claude Code's "Don't Ask Again" file leaks passwords and keys in 1,122 public GitHub copies

The Critical Stack · Nov 8, 2026 · 5m

Claude Code's "Don't Ask Again" approvals are leaking live passwords and API keys into public GitHub repos, so audit and rotate any secrets typed into approved agent commands. The same day, an actively exploited OpenSSH flaw on musl-based systems and a bank heist through a service provider show that trusted access paths keep failing.