If you use Railway for Claude Hosted Apps, Disable you API Keys used there, they are being harvested.

Including one Claude API key I had in their variables and fortunately I was only hit for $80. Anthropic picked up on it first and shut down my auto reload. status.railway.com Railway Status