Claude Code sends your email address to websites(github.com)
1592 points by motoroco 6 days ago | 518 comments
tl;dr: Claude Code includes users' email addresses in the User-Agent header during web searches, exposing them to arbitrary third-party sites and reportedly resulting in a flood of scam emails. The bug report demands Anthropic remove this behavior entirely rather than make it opt-in/opt-out, arguing it serves no legitimate purpose and compromises user privacy.
HN Discussion:
  • ~Behavior may be partly legitimate since SEC API requires email in User-Agent header
  • ↑Claude Code should be heavily sandboxed with no access to user data or unlogged internet requests
  • ↑Anthropic developer acknowledges the issue and commits to removing email from context
  • ↑Personal confirmation that this leak caused real harm via spam flood
  • ↑The problem is worse than reported, leaking names, repos, and org info even across accounts