Fake Claude Code source downloads actually delivered malware
They thought they were downloading Claude Code source. In March, security shop Huntress warned about a, the already risky AI agent platform, as a GitHub lure to deliver the same two payloads.
Threads
Zscaler's ThreatLabz researchers came across the repo while monitoring GitHub for threats, and said it's disguised as a leaked TypeScript source code for Anthropic's Claude Code CLI.The Register