Hackers are weaponizing fake Claude source code, baiting developers with high-profile leaks to deploy malicious payloads. This sophisticated campaign, active since March, targets your credentials and API keys.

If you download unverified files, you’re handing over your infrastructure. Don't fall for the trap—only trust official Anthropic repositories.

Stay vigilant, verify your file hashes, and keep your local environments secure!