Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-21 · source-backed
A user reported that a first-page result for how to install Claude Code was a published Claude artifact hosted on a legitimate Anthropic domain, styled like Anthropic's install docs, serving a curl ... | bash command. Running it triggered a macOS password prompt and installed persistent launch agents requesting further access; the user wiped the disk. r/ClaudeAI The attack surface is the publishing feature itself. A first-party domain with good SEO reputation laundering an attacker-controlled install script is a category of problem every vendor with user-published content now owns, and I haven't seen anyone solve it beyond takedowns after the fact. Note the post is single-source and the author declined to link the artifact.
Each link below shares sources, entities, or timing with this story.
Anthropic partners with Google / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic partners with Google); both cover Anthropic, Claude, Claude Code, ClaudeAI; reported by the same outlet (reddit.com).
Linked by a graph relationship (Anthropic partners with Google); both cover Anthropic, Claude, Claude Code, ClaudeAI; reported by the same outlet (reddit.com).
Google released MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Google released MCP); both cover Anthropic, Claude, Claude Code, ClaudeAI; reported by the same outlet (reddit.com).
Google deprecates Gemini CLI / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Google deprecates Gemini CLI); both cover Anthropic, Claude, Claude Code, Google; overlapping topics (agent, claude, code).
Anthropic partners with Google / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic partners with Google); both cover Anthropic, Claude, Claude Code, ClaudeAI; reported by the same outlet (reddit.com).
Linked by a graph relationship (Anthropic partners with Google); both cover Anthropic, Claude, Claude Code, ClaudeAI; reported by the same outlet (reddit.com).
Google released MCP / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Google released MCP); both cover Anthropic, CLAUDE, ClaudeAI; reported by the same outlet (reddit.com).
Anthropic partners with Google / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic partners with Google); both cover Anthropic, Claude Code, ClaudeAI; reported by the same outlet (reddit.com).