Claude Malware Attack: Malicious Download Link and Poisoned SKILL.md Explained | The CyberSec Guru
thecybersecguru.com
A Claude user reportedly suffered a malware infection after following an AI-provided download link, then discovered a poisoned SKILL.md capable of restoring malware and stealing credentials

A user reportedly got infected after following a download link provided by Claude. After wiping the laptop, they found a malicious SKILL.md that could potentially reinfect the system through Claude Code and steal credentials. A worrying look at how AI agents can become a new malware and supply-chain attack surface.