用户报告 Claude Code 在网页搜索时向第三方网站泄露邮箱地址

Claude Code sends your email address to websites

AI 导读

有用户在 GitHub 上报告，Claude Code 2.1.318 在未经许可进行网页搜索时，通过 User-Agent 请求头把用户邮箱地址发送给任意第三方网站，导致其每天收到数十封诈骗邮件。该用户认为这一行为不应以可选设置的形式存在，而应从工具中彻底移除，并表示正将公司迁移到 OpenRouter 上的 Pi。环境信息显示平台为 darwin、终端为 tmux。

正文 · 原文

Bug Description

I receive dozens of scam emails per day because claude code divulged my email to arbitrary 3rd parties in the User-Agent request header while conducting web searches without my permission. This should not be a setting with opt-out or opt-in behavior, it needs to be removed from the harness entirely. It is not for the good of anyone involved: it does nothing for services which dislike agentic traffic, does not preserve my anonymity on the web, and is a goldmine for scammers. I am migrating my company to Pi with OpenRouter since I have no faith in anthropic preserving my privacy.

Environment Info

Platform: darwin
Terminal: tmux
Version: 2.1.318
Feedback ID: f81eb83d-9b95-4788-8773-d3fae8f0cec4

Reacted by Klughertz Jonathan, Netkas, Sebastian Hooker, ryanlsmith, Tyler Coffman, InventorBlack, TacoDevs, Luis Diaz, Dan Avery, wei and 6 more

来源：Hacker News · github.com