Leak vs Lure: How the March 2026 Claude Code source leak and InstallFix campaigns turned install guides into credential-stealing attack chains
In March 2026 an accidental release of 512,000 lines of Anthropic’s Claude Code source combined with concurrent InstallFix social‑engineering campaigns to create a single, practical threat: attackers now pair intimate knowledge of an AI agent’s internals with cloned install pages that convince developers to run one-line commands that deploy credential‑stealing malware. What the leak actually […]
