Claude Code is leaking real email address as a User-Agent string in curl command

matada_ 38 points 29 comments August 11, 2026
github.com · View on Hacker News

Discussion Highlights (10 comments)

rvz

Then don't use Claude Code. Just yet another reason to use an open source harness instead of a closed harness.

simonw

This is not a good bug report - it provides no details at all, and the steps to reproduce are not steps to reproduce. The most important missing detail is what curl was being used for. I've seen APIs that require extra details in the user-agent to work. Was it one of those? (Still not acceptable for Claude to leak an email address like this without explicit confirmation from the user, but it's hard to investigate what happened without more information than was provided here.)

goldenarm

I respect Anthropic for dogfooding and vibecoding their own products. The unfortunate consequence is low quality engineering and a billion dollar product with 15k pending Github issues.

cr3ative

No logs provided. No replication case. A month old, un-responded to issue. The template for a bug report filled out completely incorrectly. What is this doing here? If OP is the person responding, could they not at least have provided those details to help the bug report become more well rounded? The mind boggles. While this isn't a great example, I'm worried about the direction "developers" are going in.

tosh

is this confirmed? this is a github issue with little context and only one comment

raincole

(A single user claimed that) Claude Code is leaking real email address as a User-Agent string in curl command. Fixed for you!

sixhobbits

This happened to me too. Not 'Claude code' as such but I was doing some I guess slightly grey area scraping (of an undocumented public API) and got my IP address blacklisted. I signed up for some rotating residential proxies to get around that, and then noticed that the scraping system Claude had built for me 'helpfully' added my email address as a user-agent. It mentioned that it decided to do this so that they could reach out to me and ask questions instead of blocking me again, but still probably one of the strongest cases of misalignment I've seen from an AI

icase

this happened to me and it was shocking. the model got a good “what the fuck is wrong with you” talking-to after that.

ashu1461

Not even sure if the bug is real / has been solved. Tried it out here : https://postimg.cc/Sj1XnM0t

pushcx

I run a site about programming that's constantly hit by people writing their first scrapers, etc. I checked the last ~10 million lines of http logs and see no instances of this. Anthropic doesn't really respect robots.txt so it's all over the logs, but not with an email address or in the form given in this github issue. This is just an odd thing you got an LLM to spit out.

Semantic search powered by Rivestack pgvector
4,128 stories · 37,281 chunks indexed