On November 2, 2026, a security researcher sent an uncomfortable email to a database vendor. The message told the company that its own admin-level cloud API key
Don't Ask Again, Publish Forever: How a Claude Code Permission File Leaked 2,539 Secrets to GitHub