I inspected Claude Code for privacy reasons and found hidden system prompt markers based on API base URL and timezone.
Is Claude Code Secretly Installing Spyware?
A researcher caught Claude Desktop installing browser bridges silently. Plus the MCP RCE Anthropic won’t patch.
How I've been using Claude Code
I've been using Claude Code a lot recently, and having a pretty good time of it. This is my report on that, and what I've found does and doesn't work well.
Overview - Claude Code Docs
Claude Code is an agentic coding tool that reads your codebase, edits files, runs commands, and integrates with your development tools. Available in your terminal, IDE, desktop app, and browser.
Boris Cherny (@bcherny)
I'm Boris and I created Claude Code. Lots of people have asked how I use Claude Code, so I wanted to show off my setup a bit. My setup might be surprisingly vanilla! Claude Code works great out of the box, so I personally don't customize it much. There is no one correct way to use Claude Code: we intentionally build it in a way that you can use it, customize it, and hack it however you like. Each person on the Claude Code team uses it very differently. So, here goes.
Claude Code Unpacked
What actually happens when you type a message into Claude Code? The agent loop, 50+ tools, multi-agent orchestration, and unreleased features, mapped from source.
How Anthropic teams use Claude Code | Claude
Teams across Anthropic use Claude Code for everything from debugging production issues and navigating unfamiliar codebases to building custom automation tools. Here's how.
Entire Claude Code CLI source code leaks thanks to exposed map file
512,000 lines of code that competitors and hobbyists will be studying for weeks.
Claude Platform
Updates to the Claude Platform, including the Claude API, client SDKs, and the Claude Console.
Comment and Control: Prompt Injection to Credential Theft in Claude Code, Gemini CLI, and GitHub Copilot Agent
Anthropic Claude Code Security Review, Google Gemini CLI Action, and GitHub Copilot Agent are vulnerable to prompt injection via GitHub comments — turning PR titles, issue bodies, and issue comments into attack vectors for API key and token theft.
Claude for Chrome | Claude
Bring Claude's AI assistance to your browser. Ask questions, analyze data, automate tasks, and navigate sites in Chrome. Works with Claude Code and Desktop.
claude-code/plugins/ralph-wiggum at main · anthropics/claude-code
Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflo...
Securing CI/CD in an agentic world: Claude Code Github action case | Microsoft Security Blog
Microsoft Threat Intelligence identified a prompt injection pathway in Claude Code GitHub Action that allowed access to workflow secrets under specific conditions. This research examines the attack chain, responsible disclosure process, Anthropic's mitigation, and guidance for securing AI-powered CI/CD workflows.
chore: bump Claude Code to 2.1.128 and Agent SDK to 0.2.128 · anthropics/claude-code-action@2cc1ac1
Contribute to anthropics/claude-code-action development by creating an account on GitHub.
Gergely Orosz on Twitter / X
This is either brilliant or scary:Anthropic accidentally leaked the TS source code of Claude Code (which is closed source). Repos sharing the source are taken down with DMCA.BUT this repo rewrote the code using Python, and so it violates no copyright & cannot be taken down! pic.twitter.com/uSrCDgGCAZ— Gergely Orosz (@GergelyOrosz) March 31, 2026
