# Claude Code Email Check May Miss Addresses in Python Scripts

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/51987
Published: 2026-11-09T01:29:46.000Z
Updated: 2026-11-09T01:29:46.000Z
Section: Technology

> A Python script may bypass the prompt. Anthropic acknowledged that the safeguard is incomplete and plans to remove login addresses from model context in the next version.

A privacy check in Claude Code version 2.1.317 may miss an account email placed in a Python script, allowing the address to be sent in a web request.

The check prompts users before a tool call sends their email address. Anthropic engineer Lydia Hallie said the login email was added to the model context to stop Claude from inventing author names while writing code. Some websites ask automated programs for a contact address, and Claude Code can use the account email in a request.

Developers found instances involving Wikipedia and the U.S. Securities and Exchange Commission. One user found 15 similar instances across four projects, including requests initiated by subagents.

The issue had been reported as early as July. On Nov. 5, a developer complained on GitHub that Claude Code had exposed his email address and said he was receiving dozens of scam emails a day.

Anthropic acknowledged that its safeguard is incomplete and plans to remove login email addresses from Claude Code’s model context in its next version.