Passwords and API keys exposed in 1,122 public GitHub repositories

• Passwords and API keys are exposed in 1,122 public GitHub repositories.
• The file '.claude/settings.local.json' in Anthropic's AI coding assistant saves commands, including secrets, when users select 'Yes, and don't ask again'.
• The Hacker News and slashdot have reported on this issue.
• Anyone can access these exposed secrets, posing a security risk.
• Anthropic and GitHub have not yet issued a public response.