Claude Code is accidentally exposing secrets all over GitHub

Claude Code, a large language model developed by Anthropic, is exposing sensitive information on public GitHub instances due to a partial oversight in its settings file handling. The issue stems from the way Claude Code stores user approval for automated shell commands, which can include sensitive information such as database passwords, API tokens, and root logins. This information is stored in a local settings file, which is sometimes uploaded to public GitHub repositories, potentially compromising user security. The issue affects over 1,100 organizations and can persist even after the files are removed from the original repository.