Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other ...
Hackers are using Google Ads and Claude shared chats to target Mac users with fake setup instructions that can install malware.
Fake Claude Code installer malware used Google Ads to place spoofed AI tool pages above real documentation since March 2026.
Threat actors are employing a new variation of the ClickFix social engineering technique called InstallFix to convince users into running malicious commands under the pretext of installing legitimate ...
Crooks abused Claude’s “Shared Chats” feature to plant fake install instructions leading to infostealer infections Fraudulent chats were promoted via Google Ads, showing authentic Claude URLs to trick ...
Claude Code plugins now have an official Anthropic-managed directory at github.com/anthropics/claude-plugins-official, consolidating 30-plus internal and 15 vetted external Claude Code extensions behi ...