Expired50% confidenceEventExact time
Mozilla's Lindin team discovered an attack chain targeting Claude Code, which The Decoder subsequently followed up on.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/9/2026
First Seen
This claim has expired. It is kept for the record and no longer describes the current state.
Valid until: 10/7/2026(expired)
Sources
The Security Risks of Running Unfamiliar Repos with Claude Code: How AI Agents Get Hijacked
bilibiliAIlazy俊7/7/2026
Related Claims
VerifiedHackers set up a counterfeit Claude AI website, luring users to download the Beagle malware trojan to carry out cyberattacks.68% similarUnverified2022年Codecov事件中攻击者通过篡改Codecov的构建脚本，导致数千家企业CI环境中的环境变量被静默上传至攻击者63% similarUnverifiedSysdig published a report analyzing an attack case named JadePuffer, a fully autonomous LLM agent capable of breaking into servers, stealing credentials, moving laterally, encrypting databases, and leaving a ransom note.61% similarUnverified该漏洞的技术本质是PATH劫持攻击，Cursor执行Git操作时会从项目目录中查找并调用git可执行文件60% similarUnverifiedThe Codecov incident occurred in 2021, when attackers tampered with CI tool scripts to steal enterprise environment variables and keys at scale.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/391517API
curl https://kongchang.com/api/v1/knowledge/claims/391517MCP
get_claim(id=391517)