Claude Code settings.local.json Secrets: 17 months of exposure on GitHub, & Docker Hub

GitGuardian

This story is part of the morning brief Railway breach turned stolen customer AI keys into $740,000 of fraud, and NEAR AI loses an inference server to an SGLang RCE. The reporting lives at the original source.

Read at GitGuardian

Railway's full report shows an attacker hunting AI provider keys, NEAR AI says confidential inference didn't stop an SGLang exploit, and Microsoft shows a 10-neuron backdoor for agent models.