#oauth
2 articles
Beware: Claude Code's Security-Guidance Plugin Leaks Your OAuth Tokens Into the Transcript
The official security-guidance plugin reads ~/.claude/.credentials.json and echoes full access/refresh tokens into stop-time revie…
Beware: Claude for Chrome Extension OAuth Grant Survives Global Logout — You Cannot Kill It
A Claude for Chrome extension OAuth grant persists after 'Log out of all devices,' password changes, and every visible token revoc…