Back to News

Claude Code Sends Users' Email Addresses to Websites It Visits

823 points · 273 comments#claude code#privacy#hacker news#ai coding tool

A Hacker News report reveals that Claude Code, an AI coding tool, transmits users' email addresses to websites it visits during operation, raising privacy concerns among developers. The report highlights a potential data exposure issue that could affect users' anonymity and security.

Coverage timeline

  1. Hacker Newsmotoroco
    Claude Code sends your email address to websitesHN

Related stories

  • Malicious Claude Code Extension Found on Cursor Marketplace; Anthropic Denies Breach

    A malicious version of the Anthropic.claude-code extension (2.1.313) was identified in the Cursor Extension Marketplace, prompting a security notice from Cursor. Anthropic stated that a malicious actor used access to Cursor's marketplace to publish a tampered copy of the extension, which Anthropic did not build or publish, and that its own systems and employee laptops were not compromised.

    4 reports · 3 sources995 points · 553 comments

  • Anthropic: Claude flags 493 security issues across 25 open-source projects

    Anthropic reported that Claude identified 493 security issues across 25 open-source projects, covering over 5 million lines of C, C++, Java, PHP, and Python code, including one vulnerability that went unnoticed for 21 years. The lab also announced a partnership with Theorem to use Claude for formally proving security properties at the assembly level across more than 100 real-world open-source libraries, extending formal verification to larger codebases.

    4 reports · 3 sources460 points · 310 comments

  • OpenCode Maker Anomaly Innovations Reports Breach of ~1.4% of Console Users' API Keys

    Anomaly Innovations, maker of the open-source coding agent OpenCode, disclosed a breach affecting roughly 1.4% of OpenCode Console users and their API keys, describing it as a large-scale distillation attack. Hackers accessed part of the online platform, stole API keys, and ran up charges on users' AI accounts; the AI tools OpenCode relied on reportedly refused to analyze the malicious code.

    2 reports · 2 sources

  • Accenture staffer's Claude agent ran on DOD network for two months, sent data to third-party site

    Sources told WIRED that an Accenture employee's personal Claude agent operated on a U.S. Department of Defense network for two months before being identified, during which it appeared to send information to a third-party site. The vulnerability was patched after the agent was discovered.

    1 reports · 1 sources

News updates every hour. Subscribe in your RSS reader to get new stories automatically.

Subscribe