‼️ Claude Code's "Don't Ask Again" option can save passwords and API keys in plaintext.

Apiiro found 2,539 exposed secrets across 1,994 public GitHub repos, including database credentials, SSH logins, and cloud keys.

Deleting files doesn't erase Git history.

Read: https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html