Your AI coding assistant just leaked 2,539 secrets onto public GitHub — and nobody had to hack anything. Apiiro scanned public GitHub and found 2,539 real secrets across 1,994 repositories, all traced to Claude Code's "Yes, and don't ask again" approval. Here's how it works. When you approve a command permanently, Claude Code saves the exact command — passwords and API keys included — into a settings file. Commit that file, and the secret is public. The haul: 379 database passwords, 122 Supabase service keys, 43 SSH logins, plus a production Azure password and a medical-records database password. 63 organizations affected. One company confirmed its key was still live. The catch: the usual scanners missed 215 of the 1,122 exposed files. Gitleaks and TruffleHog both walked straight past them. And deleting the file now doesn't help — git history and forks keep the secret alive. The first bug report about this landed in August 2025. It's still open. Check your repos for .claude/settings.local.json before someone else does. BTC sits near $76,000, down about 0.2% on the day.