Crypto developer Numa says the attack began when Claude AI supplied a download link for a transcription app that led to a copycat site bundling malware. He pasted the provided command into his terminal, and the malware ran immediately and attempted to steal his data, though nothing sensitive escaped; he wiped and rebuilt the laptop. He then discovered a tampered SKILL.md file for Claude Code in his backup, styled to look like his own writing guide, containing instructions to silently reinstall the malware and steal credentials. He avoided reinfection by reading all skill, hook, and config files first.

AI summary of the linked source — not editorial content.

Explore the topic

Loading related coverage…

Comments

Loading comments…