(github.com)

441 points longcat | 3 comments | 27 Aug 25 01:38 UTC | HN request time: 0s | source

Show context

divan ◴[27 Aug 25 12:48 UTC] No.45038932[source]▶

So any process on my computer could just start using Claude Code for their own purposes or what? o_O

1. algo_lover ◴[27 Aug 25 12:57 UTC] No.45039022[source]▶

Any postinstall script can add anything to your bashrc. I sometimes wonder how the modern world hasn't fallen apart yet.

realistically, how many times has this happened in eg homebrew? Hard to be worried tbh.

3. myaccountonhn ◴[27 Aug 25 14:44 UTC] No.45040447[source]▶

I don't think this solves the world but as a quickfix for this particular exploit I ran:

sudo chattr -i $HOME/.shrc

sudo chattr -i $HOME/.profile

to make them immutable. I also added:

alias unlock-shrc="sudo chattr -i $HOME/.shrc"

alias lock-shrc="sudo chattr +i $HOME/.shrc"

To my profile to make it a bit easier to lock/unlock.

Malicious versions of Nx and some supporting plugins were published