Claude Desktop and child processes accessing multiple credential files

ills3c Intel&Coffee@Ills3C

•updated 4 days ago•6•0•12

Detects Claude Desktop or its spawned child processes (such as node, python, or shell interpreters) accessing two or more distinct credential or sensitive configuration paths (such as SSH keys, AWS credentials, npmrc, etc.) within a 10-minute window on the same device.