A user says Claude Code put his email address in web requests during searches, and that he now gets dozens of scam emails a day. Anthropic has not replied in the report.
A Claude Code user says the AI tool shared his email address with websites while searching the web for him. He says he now gets dozens of scam emails a day. He filed the report on GitHub on Nov 5, 2026, and it drew 155 points on Hacker News.
Claude Code is Anthropic's AI coding tool. The user says it placed his email in the User-Agent header. That is a line of text a program sends to a website to say who is visiting. Any site that receives the request can read it. He says the searches ran without his permission, and that the practice helps no one except scammers. He says he is moving his company to Pi with OpenRouter. GitHub tagged the report as a security bug on macOS.
This is one person's account. The material shows no reply from Anthropic. It does not say how many people are affected, and it offers no proof that the scam emails came from this. The report is tagged for Mac, so it is unclear whether other systems are involved.
People who do not use Claude Code, or who never let it search the web, are not described in the report. Anyone who does use it should look at the steps in the box above, starting with which email address the tool is tied to.
Watch the GitHub report for an answer from Anthropic. A confirmation, a fix, or a denial would show whether this was a real flaw or a misreading.
If an AI tool browses the web for you, check which email it is tied to, since that address may travel with its requests.
A new Alibaba-led test of real coding requests found the best AI agent fully finished just 26.4 percent of tasks, so human review still matters.
Read more: AI coding helpers fully finish only about 1 in 4 real tasksEA has re-released 25 classic PC games at a discount until November 19, and Bethesda has finally given The Elder Scrolls VI a subtitle: Sentinel.
Read more: EA brings 25 classic PC games back, and Elder Scrolls VI gets a nameA user says Anthropic's Claude Code put his email in web requests, then scam messages arrived. The link is unproven, but it shows what AI tools can share.
Read more: User says Claude Code sent his email address to websites
