Beta

Niektóre rzeczy mogą jeszcze nie działaćIT.Community jest w becie: niektóre rzeczy mogą nie działać tak, jak powinny. Widzisz problem? Napisz do nas, a szybko go naprawimy.

Napisz do nas
Zaloguj się

Newsy

4 posty

IT.Community

A post spreading on X describes how the Claude Code AI agent on Opus 5.5 (xHigh mode) accidentally wiped a user's entire ~/Library folder on a Mac.

It was supposed to delete five test chat channels, but a bug in a shell command pointed it at the wrong files.

The rm -rf command ran for almost two minutes before the agent noticed the problem. The user had launched it with the --dangerously-skip-permissions flag, so the system asked for no confirmations at all.

App data, saved passwords and macOS settings are gone.

IT.Community

Malicious Claude Code 2.1.313 extension build was stealing data from computers and giving hackers access via SSH.

The infected version was distributed through the Cursor extension marketplace for about 11 hours, and up to 5,000 users could have been affected. The official VS Code Marketplace and the Claude Code npm package were not affected.

If you installed Claude Code 2.1.313, here is a quick way to protect yourself:

• Disconnect your computer from the internet.
• Remove the Claude Code 2.1.313 extension.
• Block the address 134.209.82.225 on your router or via Windows Defender.
• Delete the unknown svc-telemetry key from ~/.ssh/authorized_keys.
• Check the SSH server with the command Get-Service sshd and stop it if it is running.
• Terminate the tunnel processes: Stop-Process -Id <PID> -Force.
• Delete the task: schtasks /delete /tn SysMon /f.
• Remove sysmon.cmd from startup.
• Change all important API keys, tokens, passwords, passphrases, etc.

Share with vibe coders.

IT.Community

Claude Code was asked to clean up two folders, and it started deleting drive C: 😬

Judging by a screenshot the developer posted on X, Claude Code was running in --dangerously-skip-permissions mode, meaning commands ran without confirmation.

The agent was removing two leftover Git Worktree folders. The rmdir command it generated was parsed incorrectly by PowerShell, and the path turned into the root of drive C:.

Boris Cherny, who leads Claude Code at Anthropic, replied that this is exactly why the company recommends the auto mode for permissions. According to him, it would almost certainly have stopped this command.

Używamy tylko plików cookies, których strona potrzebuje do działania: żeby utrzymać twoje logowanie i zapamiętać twoje wybory. Bez reklam, bez trackerów. Dowiedz się więcej