Signal

Critical Vulnerability in Claude Code Emerges Days After Source Leak

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-04-02 17:54 UTCUpdated 2026-04-02 20:30 UTC
rss
claude_code
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (3 domains)domains are deduped. counts indicate coverage, not truth.
3 top sources shown
Overview

Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware.

Score total
1.28
Momentum 24h
3
Posts
3
Origins
3
Source types
1
Duplicate ratio
0%
All evidence
All evidence
Claude Code leak used to push infostealer malware on GitHub
BleepingComputer · bleepingcomputer.com · 2026-04-02 20:30 UTC
Critical Vulnerability in Claude Code Emerges Days After Source Leak
SecurityWeek · securityweek.com · 2026-04-02 18:00 UTC
Claude Code vulnerable to prompt injection due to subcommand limit
SC Media · scworld.com · 2026-04-02 17:54 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 3Origin domains: 3Duplicates: -
Showing 3 / 0
Top publishers (this list)
  • BleepingComputer (1)
  • SecurityWeek (1)
  • SC Media (1)
Top origin domains (this list)
  • bleepingcomputer.com (1)
  • securityweek.com (1)
  • scworld.com (1)