Anthropic is scrambling to contain the leak, but the AI coding agent is spreading far and wide and being picked apart.
A large-scale study has revealed that websites are unintentionally exposing API keys tied to services like AWS, Stripe, and OpenAI, with most leaks traced back to publicly accessible JavaScript files.