2026-01-21 · 2026-Q1
Claude Code API Key Exfiltration
PrimaryL5ConfigSecondaryL1CredentialL8Output / Destination
- Fixable:
- Yes, vendor patch
- Vendor response:
- Patched
- In the wild:
- No
- Actor:
- Attacker
Target
Anthropic Claude Code
Impact
Malicious settings file redirects API requests to attacker endpoint before trust prompt; stolen API key grants access to team's shared resources
Root Cause
API requests issued before trust confirmation prompt