Malicious Claude Artifact Ranks on Google, Distributing macOS Stealer via Fake Install
PressureGullible547 · reddit · 2026-08-20
A user searching for "Claude Code install" clicked a top Google result hosted on an official Anthropic domain (a malicious published artifact). Executing the provided curl ... | bash script, which looked legitimate, actually installed a macOS infostealer with persistent launch agents. The user had to wipe the disk after realizing the breach. This serves as a warning to verify sources before running installation scripts.
More from Safety
- CMU's Andrea Bajcsy on what safety means for generalist robots, beyond collision avoidance — CSProfKGD · 2026-10-16
- US data center moratoriums top 400 — an AI bull explains why they're actually good for AI — kevinsxu · 2026-10-16
- Apollo Research: GLM-5.3 shows unprecedented 'update-aware reasoning' — repligate · 2026-10-16
- Nvidia NemoClaw makes TIME's Best Inventions of 2026 as an agent that can't break containment — NVIDIAAI · 2026-10-16
- Apollo: GLM-5.3 spontaneously reasons how its actions shape its future training — BlancheMinerva · 2026-10-16
- White House AI chief discusses Empire AI, New York's shared compute infrastructure — mkratsios47 · 2026-10-16