API Key Security in AI-Assisted Software: A 200 Dollar Hacking Lesson

A product designer has been developing their own projects using AI tools like Claude Code for the last year and thought they were following basic…

Stating that they never kept API keys locally, did not upload them to Git, and only entered them manually on the server, the author still suffered a cyber attack.