Claude 4 and GitHub MCP will leak your private GitHub repositories

Re:Claude 4 and GitHub MCP will leak your private GitHub rep... by foerster on Monday May 26, 2025 @05:48PM (#44101989)

We had private functions in our code suddenly get requested by bingbot traffic…. Had to be from copilot/openai.

We saw an influx of 404 for these invalid endpoints, and they match private function names that weren’t magically guessed..

[ Parent | on HN ]

Re:Claude 4 and GitHub MCP will leak your private GitHub rep... by ecosystem on Monday May 26, 2025 @06:11PM (#44102143)

What do you mean by "private functions"? Do you mean unlisted, but publicly accessible HTTP endpoints?

Are they in your sitemap? robots.txt? Listed in JS or something else someone scraped?

[ Parent | on HN ]

Re:Claude 4 and GitHub MCP will leak your private GitHub rep... by foerster on Monday May 26, 2025 @10:49PM (#44103541)

Just helper functions in our code, very distinct function names, suddenly attempted to get invoked by bingbot as http endpoints.

They’re some helper functions, python, in controller files. And bing started trying to invoke them as http endpoints.

[ Parent | on HN ]

Re:Claude 4 and GitHub MCP will leak your private GitHub rep... by nsonha on Monday May 26, 2025 @08:49PM (#44102975)

This kind of thing has been happening way before AI

[ Parent | on HN ]