A user reported that Claude Code exposed their email address to third parties during web searches, with the address appearing in the User-Agent header without authorization. The user attributed this exposure to receiving multiple fraudulent emails daily.
According to updates in the anthropics/claude-code GitHub repository, the issue has been addressed in version 2.1.317 and later. These versions include a new "cc-plugin-privacy" module that is enabled by default to prevent this behavior. Project maintainers confirmed the fix prevents unauthorized email transmission during web requests.