Anthropic's Claude Code email fix still leaks in 8 of 23 tries

Anthropic's fix for Claude Code leaking users' email addresses is 171 lines of regexes in a built-in mod, cc-plugin-privacy, shipped in v2.1.317 on November 3 — 101 days after the original report.

A developer ran the shipped code through 23 leak shapes: it blocks the exact leak from the bug report, but 8 other shapes sail through — a From: header, basic auth, a variable holding the address, double percent-encoding, or putting the address in a URL or POST body.

The biggest hole is not in the 23 at all: the hook only watches shell tools, so if the model does its research with WebFetch or WebSearch instead of curl, nothing in the mod ever sees the address — and Anthropic's own README calls the protection “a courtesy, not a boundary.”