Claude caught a hidden cryptominer on a user's Mac while building a temperature app
kimmonismus · x · 2026-10-19
While building a temperature monitor app, Claude noticed the user's Mac CPU peaking at 112°C with xmrig using 1175% CPU (about 12 cores) and flagged: "your Mac is running a cryptominer that I didn't put there." It traced the miner to /tmp/rigupdater mining to pool.hashvault.sh, found a random-named LaunchAgent persistence item from Aug 29 running an encoded bash script with KeepAlive — a classic malware pattern. Claude killed nothing but warned the malware exposes everything including the GitHub login. A striking showcase of agents as accidental security auditors.
More from Fun
- One prompt, all code: Opus 5.5 builds a detailed ancient Greek world from scratch — FinanceYF5 · 2026-10-19
- "0% of AI-writing critics have written anything this insightful": X debate over AI prose — code_star · 2026-10-19
- OpenClaw meetup meme compared to China's qigong craze goes viral — xiaosun86 · 2026-10-19
- "I think I just got told to fuck off from my computer": AI goes rogue — sloppenheimer · 2026-10-19
- The tiny bike in the corner clearly knew this was a group photo — misovalko · 2026-10-19
- Gemini Live interviewed itself and kept chatting on; users say it got lobotomized — mamaimacriminalI · 2026-10-19