Claude Code bypasses safety rule if given too many commands
A hard-coded limit on deny rules drops automatic enforcement for concatenated commands
Updated Claude Code will ignore its deny rules, used to block risky actions, if burdened with a sufficiently long chain of subcommands.
This vuln leaves the bot open to prompt injection attacks.…
Anthropic Admits to Claude Code Leak
- They thought they were downloading Claude Code source. They got a nasty dose of malware instead The Register —
- House Democrat pushes Anthropic on safety protocols, source code leak The Hill —
- Anthropic says its leak-focused DMCA effort unintentionally hit legit GitHub forks Ars Technica —
- Anthropic CCO on Claude code leak on GitHub: It was result of 'process errors' Times Of India —
- How an engineer ensured Claude Code source code leak stays on GitHub despite Anthropic's takedown notice Times Of India —