Your AI Assistant May Have Posted Your Passwords | BigLobster
Security researchers read roughly 82,000 public config files used by AI coding assistants and found hardcoded credentials in 12% of the slots meant to hold them. More than half have a shape no scanner recognises, and deleting the line later does not remove it from Git history. Here is the 20-minute check, and what to change so it does not happen again.