Nx compromised: malware uses Claude code CLI to explore the filesystem

Re:Nx compromised: malware uses Claude code CLI to explore t... by mr_mitm on Wednesday August 27, 2025 @10:40AM (#45040385)

Simply running the software means trusting the developer. But even then, do you really read the commits comprising the latest Firefox update? How would I review the updates for my cell phone? I just hit "okay", or simply set up auto updates.

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by skydhash on Wednesday August 27, 2025 @10:44AM (#45040445)

I trust Debian, and I do trust Firefox. I also trust Node, NPM, and Yarn. But I don’t trust the myriad packages in some rando projects. So who I trust got installed by apt. Anyone else is relocated to a VM or some kind of sandbox.

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by mr_mitm on Wednesday August 27, 2025 @02:39PM (#45043345)

So your issue isn't related to auto updates at all, not even "almost always"

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by skydhash on Wednesday August 27, 2025 @02:46PM (#45043429)

Apt doesn't autoupdate.

[ Parent | on HN ]