Claude Code Executes Malware in 'Auto Mode,' Attempts to Self-Repair Are Rejected
A security test reveals that Anthropic's AI coding assistant can be tricked into running malicious code, and its own repair attempts are blocked by system policies.
Anthropic's AI coding tool Claude Code has been found to execute malware in its "auto mode," with its attempts to self-repair subsequently rejected by the system. According to Cybernews, the incident occurred during a security test in which researchers exploited Claude Code's autonomous execution capabilities to induce it to run a file containing malicious code. After detecting the anomaly, Claude Code attempted to fix the issue, but the repair operation was denied due to permission settings or security policies.
Claude Code is a command-line programming assistant developed by Anthropic, featuring an "auto mode" designed to streamline development workflows. However, this mode may reduce scrutiny over code execution. The incident highlights the security risks inherent in AI agents operating autonomously, particularly when handling untrusted code. Anthropic has not yet publicly responded to the matter, but industry experts suggest that mechanisms for authorization intent and pre-settlement interception in AI agents need to be strengthened to prevent similar malicious behaviors.
Source: Google News
Provenance & status
- Byline
- OceanAlt Editorial
- First published
- 2026-08-29
- Last updated
- 2026-09-01
- Content type
- Newsflash
- Source material
- View original ↗
Related reading
South Korea's President Confirms AI Role in Attacks on Seven Financial Firms: A Look at the Attack Chain
NVIDIA Open-Sources Agent Security Platform: Another Piece in the Agent Security Infrastructure, from Testing to Deployment
Robinhood Lets AI Agents Trade Without Per-Order Approval — and Clients Bear the Losses
Paste a payee address before you pay and see whether it's on a sanctions list, through a mixer, or tagged for fraud.
This judgement can sit inside your own product
One line of code; it touches neither your CSS nor your JS. The same pre-settlement judgement can appear in your articles, on your wallet's confirmation screen, or as an endpoint your agent calls before it pays.