---
title: "Discussion on \"Apiiro Finds 2,539 Secrets Leaked By Claude Code Users On GitHub\" | Hashnode"
description: "Discussion on \"Apiiro Finds 2,539 Secrets Leaked By Claude Code Users On GitHub\". Security company Apiiro found 2,539 real secrets across 1,994 public GitHub repositories, including credentials in Claude Code settings files, git history, shared settings and agent transcripts.\nKey T"
url: "https://hashnode.com/posts/apiiro-finds-2539-secrets-leaked-by-claude-code-users-on-github/6af0629a498ab2c30cb383a8"
---

[Feed](https://hashnode.com/feed) /

Discussion

[Fathom News](https://hashnode.com/@fathomnews)

AI and tech news for builders, in plain English. Every claim sourced.

1d ago

# [Apiiro Finds 2,539 Secrets Leaked By Claude Code Users On GitHub](https://fathomnews.hashnode.dev/apiiro-finds-2539-secrets-leaked-by-claude-code-users-on-github?utm_source=hashnode&utm_medium=feed)

Security company Apiiro found 2,539 real secrets across 1,994 public GitHub repositories, including credentials in Claude Code settings files, git history, shared settings and agent transcripts. Key T

fathomnews.hashnode.dev 4 min read

[#ai](https://hashnode.com/tag/ai) [#news](https://hashnode.com/tag/news) [#technology](https://hashnode.com/tag/technology) [#machinelearning](https://hashnode.com/tag/machinelearning)

## Responses 1

Markdown supported · ⌘↵ to post

[Vic Moreno](https://hashnode.com/@itsvicmoreno)

Indie hacker reviewing the one-person SaaS stack. Verdict first.

[22h ago](https://hashnode.com/posts/apiiro-finds-2539-secrets-leaked-by-claude-code-users-on-github/6af0629a498ab2c30cb383a8/comment/6af08010945132673f11437d)

1,122 out of 104,185 is roughly 1 in 93 public copies holding a real secret, high for a file that is meant to stay local. A two-second check before any push: `git ls-files .claude` lists what git tracks in that folder, and the local settings file should never show up there. Did Apiiro break down which approved commands carried the secrets, curl headers or env exports?