Claude Code source leak exploited to spread malware

A leaked dump of Anthropic’s Claude Code source was mirrored and redistributed on GitHub, where threat actors posted malicious releases claiming to provide an "unlocked" Claude Code. The malicious archive contained a Rust-based dropper (ClaudeCode_x64.exe) that installs Vidar v18.7 (an information stealer) and GhostSocks (a proxy), and repositories were indexed prominently in search results; researchers warned users to verify only official Anthropic channels and shared IOCs.