2026-11-12 · America/Los_Angeles · 社区动态 · #15

$167 of usage on a $30 spend limit, and one of the keys was never in the code. How many of your apps share one provider key?

Someone on r/ClaudeAI found $167 of usage on their Anthropic keys this week, mostly Opus 5.5 and Fable, with a $30 spend limit set. Some keys sat hardcoded in a private GitHub repo, but one older key was never committed to their code, and it got used too. They still don't know how. The thread's guesses apply to anyone running agents: - Shell history. An export ANTHROPIC_API_KEY=... typed once sits in ~/.zsh_history for good. - npm post-install scripts that scan your disk for tokens (the top comment, 118 points). - Old .env files synced to iCloud or Dropbox. Separate story, last week: Apiiro…

热度 43.6 / 100；排名与评分保留该期记录。