Claude Code Reports Raise Concerns About Email and Secret Exposure

Separate reports allege Claude Code exposed account emails in outbound User-Agent headers and stored more than 1,100 real secrets in public settings files through permission-rule storage, with commits and Git history documenting the latter pathway. The email reports date back to July; a privacy mod in version 2.1.317 reportedly has narrow checks, and Anthropic’s planned removal of email from model context had not shipped in the article. Verify the fixes’ effectiveness and full scope; phishing causation and affected-user counts are unconfirmed.