Hackers are weaponizing fake "Claude source code" leaks to infect developers. Disguised as high-profile AI files, these bundles contain credential-stealing malware and remote access trojans.

By targeting engineers running local builds, attackers aim to swipe vital API keys and cloud tokens. Don’t fall for the curiosity trap—verify every file hash immediately.

Stay sharp, or your local infrastructure becomes their playground.