Just don’t run directly. Use containers and VMs. Anyone running this stuff directly on their PC at this point in time shouldn’t be surprised. These companies don’t care about security, just your wallet. And we’ve seen how wallet theory goes, people still keep buying.

Yes. I spinned up 7 parallel agents, there was no visibility into what subagents are doing, which made it worse.

git diff is all I care about when the robot is done doing its thing. Whatever it says in chat is mostly irrelevant to me because they all write in a way that is not very helpful. I can’t really describe it but something about the structure they all use by default really drives me nuts and I’ve opted to not bother with it.

This is crazy? sandboxes are very important. Users don't know what is happening BTS.

Yep. It just makes a good safety case for why to always use sandboxes and how serious the impacts are.

If you had been using Claude Code's built-in sandbox, would it have stopped this from happening? I'm not using it myself and I'm new to this, so I'm trying to understand.

Thanks for sharing btw