Claude Code Email Leak Exposes User Addresses
Software engineers recently discovered an unexpected privacy exposure within Anthropic’s command-line coding assistant. Specifically, an unintended Claude Code email leak exposed verified developer addresses to remote web servers. According to community discussions on Hacker News regarding the Claude Code leak, several affected developers received waves of fraudulent phishing emails. Consequently, programmers urged Anthropic to eliminate automated identity transmission across external network requests.
The vulnerability occurred whenever the artificial intelligence assistant performed web searches or executed curl commands. During these automated actions, the tool embedded the authenticated user’s email directly into the HTTP User-Agent header. Because web servers log complete client strings, external administrators harvested verified developer identities effortlessly.
Linha do tempo
-
Claude Code Email Leak Exposes User Addresses
ler a análise desta fonte ocultar
Software engineers recently discovered an unexpected privacy exposure within Anthropic’s command-line coding assistant. Specifically, an unintended Claude Code email leak exposed verified developer addresses to remote web servers. According to community discussions on Hacker News regarding the Claude Code leak, several affected developers received waves of fraudulent phishing emails. Consequently, programmers urged Anthropic to eliminate automated identity transmission across external network requests.
The vulnerability occurred whenever the artificial intelligence assistant performed web searches or executed curl commands. During these automated actions, the tool embedded the authenticated user’s email directly into the HTTP User-Agent header. Because web servers log complete client strings, external administrators harvested verified developer identities effortlessly.