Claude Code leaks API keys in plaintext, enabling remote exploits
Check Point Research uncovered critical flaws in Anthropic’s Claude Code that write every prompt, API key and secret to plaintext files under ~/.claude/projects and expose them via project‑level configuration hooks. Attackers can trigger remote code execution and exfiltrate credentials when developers clone malicious repos. All issues have been patched, but the finding highlights a new secret‑leak vector in AI‑assisted dev tools.