2026-08-30 05:58 UTC
Claude Malware Attack: Malicious Download Link Leads to Poisoned SKILL.md
A user reportedly got infected after following a download link provided by Claude.
After wiping the laptop, they found a malicious SKILL.md that could potentially reinfect the system through Claude Code and steal credentials.
A worrying look at how AI agents can become a new malware and supply-chain attack surface.
Replies (3)
-
@zakobjoa@lemmy.world 2026-08-30 06:44
a user said they were compromised after asking Claude for help installing a transcription application Yeah, maybe computers aren’t for you.
-
@Treczoks@lemmy.world 2026-08-30 07:56
Whenever developer added a new executing layer on a system, malicious people started to exploit it. Mcromedia Flash, Java, JavaScript, and now AI usage.
-
@nightlily@leminal.space 2026-08-30 07:58
I’ve seen a lot of LLM sites popping up that purport to be project pages for Open Source projects. They’re of course full of malicious links instead. Guess this is an extension of that. Can’t say I don’t feel some Schadenfreude.