The researchers identified 2,539 distinct secrets across 1,994 public GitHub repositories, including credentials that could provide access to cloud infrastructure and enterprise applications. The findings highlight a major security issue for companies that use AI coding assistants: tools that automate software development can inadvertently expose the credentials needed to operate critical IT systems.
Apiiro found that 63 organizations were affected, including software vendors and companies managing sensitive customer information. One organization confirmed that a credential identified by the researchers had been active.
The larger concern here is that AI development tools are becoming part of enterprise software infrastructure without fitting established security controls. The findings demonstrate the need to treat AI coding assistants as another potential source of credential exposure, requiring the same oversight applied to developer endpoints and production systems. How Claude Code Exposes Credentials The security issue stems from Claude Code’s “Yes, and don’t ask again” permission option, which allows developers to authorize commands for repeated execution without requiring further approval.
