Claude Code Child Process Can Read Its Own OAuth Token From macOS Keychain

A macOS Keychain implementation weakness in Anthropic’s Claude Code CLI could allow any process running as the logged-in user including a Claude Code-spawned...