Sources
- Claude Code documentation: Security · Permissions · Sandboxing · Hooks guide · Dev containers · Settings reference
- Incidents and research: Adversa AI, Top 10 attacks on Claude Code · StepSecurity, Miasma worm · The Hacker News, Miasma worm · Adversa AI, TrustFall · Adversa AI, SymJack · Wiz, GhostApproval · AIR Security, Plugin4Shell · The Hacker News, Agentjacking · The Next Web, Agentjacking
- Trail of Bits: claude-code-config, a reference hardened configuration
This post is informational and comes with no guarantee of a vulnerability-free setup, so test every configuration in your own environment. AISecurityLabs.org is independent and not affiliated with Anthropic. Claude Code is a trademark of its owner, used here only to identify the product.