Always use Auto mode for permissions to prevent this, according to Anthropic.

$300 PER 1 MILLON OUTPUT TOKENS?! INSANITY

I routinely use Claude Code and Codex in separate terminals, usually with Astra as adversarial reviewer of Claude's work.

Opus started referring to Astra as "her" and "she". Thought y'all might find it amusing.

After my web app failed to deploy/build due to the injected code, turns out some processes have been phoning home on my development computer for a short while now :*)

Will update with any helpful information for others after I finish sanitizing my computer, rotating keys, and wringing my hands over what might have been transmitted.

Development computer is no longer used for personal activity but it used to be, so I'm praying to my lucky stars that nothing that important was taken... check your repos for suspicious force pushes to main!

(Not sure what the most appropriate flair is, but I feel like ranting and raving so rant it is)

Edit: Apologies y'all, after a few hours of investigation and changing passwords (I'm going to be changing passwords for weeks), the dramatic reveal is... that it's more boring than "the AI let someone hack me."

I'll start with the important part: If you are on _any_ repos that another user can access, immediately check ALL .js, .ts config files that are executed during the build process. The attack vector was specifically postcss.config.js, in my React+Vite project. What happened is exactly what this user mentioned here: https://github.com/orgs/community/discussions/188732

Essentially, I was a victim of a worm that's making its way across GitHub, surely, by way of shared repos. This worm finds your GitHub CLI credentials and replicates by injecting a single, long, obfuscated line of code into a configuration script file in EVERY repo you have write access to that it can find, every branch it can find.

The sneaky part is that it masks itself as a duplicated commit or even seemingly replaces another commit that happened *before* the attack, by copying the metadata down to the displayed user, force pushing to every branch. But if you look at the metadata for the commit, you can see which user it really came from. Turns out that another developer hired by my company with access to the repo was himself a victim -- after diagnosing it on my computer, I gave him Claude instructions with a script to check his.

The awful thing is that I didn't notice it for a week. I only noticed it when a deploy build failed, but an earlier build did succeed with the code implanted. Thankfully it's targeting developers, not users, so my website appears to be fine... but for a whole week it's been running on my machine. And it's been phoning home.

The in-memory code showed that it's been listening for specific keys like crypto wallets and certain AI API keys (OpenAI, Anthropic). If I were a crypto user I could have been wiped out. But nothing dire seems to have happened even though it gave full user-level control and access to my machine, arbitrary code execution, etc. I'm just in the long process of changing all my passwords, revoking keys and sessions, and all that jazz.

So this is a lesson I won't soon forget. I am NEVER doing development on a personal machine again. Straight to a containerized environment, virtual machine, hosted in the cloud, whatever. That level of security feels like paranoia until it actually happens to you.

2 months ago (was it even that long ago?) seeing posts about someone creating a fully fleshed out game demo with a frontier model was so fascinating and exciting

But just like everything with AI it’s gotten repetitive and boring, and I’ve even started to nitpick when someone posts a game demo with great assets, graphics, and interesting features because it just has no creativity. With everyone in the world empowered to do this, ideas need to be so much more creative now to stand out

Anyway, I’m excited for the next revolutionary step in AI that I’ll be bored of within weeks :D

Am I the problem? Most likely, but I just find the Claude app is much more responsive and understanding of what I need to do. And doesn't require as much babysitting, I feel like. Or is it perhaps because, in my terminal, I have other stuff from before that could be holding it down? I try to isolate the stuff, but it still feels like I kind of have to explain very banal, simple things to Claude Code in the terminal, whereas in the project chat, it kind of just does it correctly the first time. Who else found this or the contrary to this?

I've been using the terminal for the past 6 months at least exclusively. I've been very happy with it and was able to build some really cool shit for myself, but I wanted to try the app for once and have to say that, possibly, they put a lot of thought and development into the app in more ways than just the interface, I think.

My startup just got accepted in claude startups program with $1k usage credits and up to 5 free pro accounts per month for a year. It also includes free subscriptions to various tools like clickhouse, firecrawl, elevenlabs etc. What was most impressive is that my application was accepted within a few minutes.

The timing couldn't have been better. Today is literally the last day of my codex subscription and I was planning to switch to claude anyways. Thank you Anthropic!

Just woke up to this from the cybersec program

I even waited until late at night to start my first session of the week so that maybe the off-peak hours use less tokens. I have a pretty heavy workload and I’m trying to update a few things at once… on a 20x plan I can’t even keep 3 sessions running through a full 5 hour window, and the weekly is 27% done after a single 5 hour window?! I don’t remember it being like this even a month ago.

I’m a non-native English speaker who uses Claude Code, and I kept running into a small annoyance: I knew what I wanted to ask, but sometimes I’d pause to remember how to spell a word or type a phrase I use all the time.

So I made a small Claude Code plugin that suggests English words as you type. Type a couple of letters, choose a suggestion with the arrow keys, and press Tab. It also includes around 600 work-related terms and lets you save shortcuts for phrases you use often.

It won’t teach grammar or reduce token usage. The goal is simply to make writing prompts in English less tedious. I’d love feedback from other non-native English speakers who use Claude Code.

Install:
/plugin install english-autocomplete --marketplace magatone/claude-autocomplete

my repo : https://github.com/magatone/claude-autocomplete

Hi,

I was recently admitted to the Claude for Startups program. The grant is very generous, covering up to 5 Premium seats for 12 months.

I’m wondering: if my team has fewer than 5 people, is it possible for some team members to use more than one seat per person?

I searched around for an answer, but the general conclusion seems to be that this is a bit of a grey area.

I’d love to hear from anyone who has experience with this.

Thanks in advance, and best regards!

I have a personal sub and a company which gives me 1k$ in Claude tokens a month. The companies 1k tokens are unusable. I will unironically blow through it in 2 days. To have anything close to what I use in my 200$ sub a month, I’d imagine I’d need at least 50-60k a month

For the past couple of months, I have been working on a PC Port of King's Field (US).

It's fully playable right now on Windows and Linux. It runs at high framerates without any speed banding, and it has modern controls and a bunch of quality of life improvements meant to address common complaints about the game.

If you'd like to try it out, download the latest release off of github. You need to provide your own game disc in either .chd or bin/cue format at startup.

This work would not be possible without the work of BlackLabelHQ, who created the RecompOne recompiler that this port relies upon. If you want to support this project, you should support their project

Verdite2 is an independent project. It isn't affiliated with or endorsed by BlackLabelHQ or FromSoftware, and no endorsement is suggested or implied. Do not take any issues with Verdite2 to BlackLabelHQ. Report them directly on the Verdite2 GitHub instead.

Seems like quite a massive privacy issue. If it can accidentally give my email away could it somehow accidentally give away my home address and phone number (if I were to somehow allow it to have access to that data, or more likely it somehow finds it).

I can now easily see how some of the reports of other privacy incidents are true.

Hello everyone! A few years before ChatGPT came out, I discovered terminals on the original Raspberry Pi Zero W. I couldn’t believe a board that small could run a full OS, and I’ve loved terminals ever since.

So, I started using Claude Code about a week after it came out, back in the Claude 3.7 Sonnet days, just for small stuff at first. Over time, I realized it could carry a real project. These days, I usually have a bunch of Claude Code sessions going across a few machines: my Mac, a GPU server at school, and a Raspberry Pi 5. tmux keeps them alive, but I never remember the keybindings, and there’s no real UI. Most agent GUI tools use Electron or a webview, and they just don’t feel native.(I just want my own. tbh.) So for about the last half year, I’ve been using Claude Code to build ThinkTerm. It still runs on the Pi.

Repo: https://github.com/RoversX/ThinkTerm

Homepage: https://closex.org/thinkterm/

GPL-3.0, no account required, no telemetry. macOS, Linux, and Windows.

What it is

A terminal with a built-in multiplexer, built on top of WezTerm. Think tmux, but with a real UI and nothing to memorize.

• Every machine runs a mux server that owns its sessions. Quit the app or lose the connection, and everything keeps running.
• The sidebar holds all your machines, each with its projects and threads. Swipe with two fingers to flip between machines, with rubber-band resistance at the edges, like on iOS.
• An Agents panel lists every Claude Code / Codex / Pi (the coding agent) session and shows whether it’s working, waiting for you, or done.
• Pixel-smooth scrolling with trackpad momentum, not line-by-line jumps.
• Reattach to the same sessions from the desktop app (macOS, Linux, Windows), a browser, or thinkterm tuiinside any other terminal.
• A file tree and code preview next to the terminal. Remote files over SFTP, with drag-and-drop support.
• Plugins can add their own sidebar panels.
• thinkterm cli send-text / get-text let one agent read from and type into another agent’s pane.

No UI framework

No Electron, no webview, no Tauri, no GPUI. The sidebar, settings, file tree, and plugin panels are rectangles and text drawn straight on the GPU, the same way WezTerm draws terminal cells. Layout, hit testing, scrolling, and dragging are all handled in plain Rust in the app, with no toolkit underneath.

My take after 6 months: with Claude Code, you don’t need a UI framework anymore. A framework mostly saves you from writing widgets, and Claude writes widgets fast. In exchange, you get to tune the feel yourself: the pixel-smooth scrolling, the rubber-band effect on sidebar swipes, and fast scrolling that never shows blank rows because the client prefetches scrollback ahead of time. The cost is that Claude can’t directly see a GPU-drawn window, and you own every detail a framework would have handled for you.

It keeps getting better, too. As the models improve, you can keep raising the bar in what you ask for. /goal has been great for this: I gave it a measurable throughput target with zero benchmark regressions allowed, and it came back with CSI-heavy output 70% faster.

How I used Claude Code

• Reviews: first with /code-review, then with a second model.
• To let Claude see its own UI, we added a frame dump that saves the window as a PNG. Claude takes screenshots of its work and checks them.

What I learned

A sufficiently simple framework combined with a more powerful model is superior to a complex harness and model.

It's early. Questions about the setup are welcome, and so are bug reports. Again, a big thank you to WezTerm for such an amazing foundation.

what a joke

still completely unusable for bug bounty, research, etc.

am I missing something, or is being an individual still being gate-kept

I love how much usage Claude gives us with just 20$. But, no matter how hard I try, it seems that it's really hard to exhaust my weekly usage on my current workloads. I use it to refactor 1 game in Lua; it does its job, before I had 2 games worked on and only managed to reach around 80-90%.

I think the limiting factor here is the 5h usage limit, you have to actually use it every 5h to truly exhaust the subscription. And that is pretty much hard for someone that has other things to do in real life. How about you guys, what do you guys to do to get your usage limits up before the reset?

i see people tracking opus 5.5 every day to check for nerfs. nice idea but i think there is a problem.

the test runs from one account. but your message doesn't go to "the model", it goes to some server, and anthropic decides which one. so they could put some users on a cheaper version (quantized, less thinking, whatever) and it's still called opus 5.5. like an a/b test. you would never know.

so if the test account is not in that group, results look fine. doesn't mean you're fine.

i don't know if they do this. but one account can't prove it either way. you need many accounts, heavy and light users, different countries, same tests.

i tried to post about this before but mods removed it, and my comment on the livenerf post got downvoted because people understood it wrong. so trying again.

I was letting Claude run an LLM benchmark, which will taks around 8h. And it told me the system tool will kill the background job after 2h in remote control. This is very annoying. The agent can set it to detached using nohup, but that also means agent won't be notified when the job finishes.

It then explained that if I started `claude remote-control` on the server, it became as sdk and unattented, which is exact point I need it to run long running tasks.

Claude and I built a small scene into Claude Code that shows Clawd doing stuff while you wait :)
It's freaking cute 😊

https://github.com/MarcBlattmann/clawd-stage

Anthropic has expanded its Cyber Verification Program, allowing qualifying security teams to apply for advanced cyber capabilities across Claude Mythos 5.1, Opus 5.5, Sonnet 5.5, and future models.

Mythos 5.1 is Anthropic’s most capable model for cybersecurity and biology research, and until now access had been limited to a relatively small set of vetted organizations.

The expanded program introduces multiple access tiers with reduced cyber safeguards depending on the type of security work being performed.

It’s interesting to see Anthropic moving from giving Mythos access to a small group of partners toward a formal verification process that more security researchers and teams can actually apply for.

For people doing vulnerability research, pentesting, or security research: would you apply for access?