howitworks.ioCyber caseReel #15 · 29 Oct 2026
Fake "leaked Claude Code" repos aur FakeGit
"Leaked Claude Code, enterprise features unlocked, free download." Lottery lagi, par hacker ki.
March 2026 mein Claude Code ka source code galti se internet pe aa gaya. Do din mein GitHub pe nakli repos ban gaye, jinki ClaudeCode_x64.exe file mein Vidar infostealer tha. Ye browser ke saved passwords, login cookies aur crypto wallets churata hai. Saath mein GhostSocks aapke PC ko hacker ka proxy bana deta hai.
Isi mahine GitHub pe 17,000 se zyada aise nakli repos pakde gaye, jo AI skills aur MCP servers hone ka naatak kar rahe the. 13,000 sirf 34 ghanton mein bane, kareeb 700 hack kiye hue developer accounts se.
Links
Aaj ye karo
- Skill sirf official command se install karo, jaise npx skills add.
- Repo ka owner asli hai ya nahi, pehle check karo.
- Zip ke andar ki .exe kabhi mat chalao.
npx skills add <owner>/<repo>Sources
Trend Micro (April 2026), BleepingComputer (October 2026).