Security researchers at Push Security have identified a malware scheme dubbed InstallFix, which tricks users into dow…

A new scheme, dubbed InstallFix by Push Security, has been discovered, which tricks coders into installing malware by inserting malicious instructions during the Claude Code installation process on cloned websites.

The scheme, which Push Security has been tracking, involves creating fake installation guides for Claude Code that appear to be legitimate, but actually contain instructions to download malware. These guides are hosted on cloned websites, making it difficult for users to distinguish them from the real thing.

The impact of this scheme is significant, as it can lead to the installation of malware on unsuspecting users’ systems, potentially compromising their security and data. As the threat landscape continues to evolve, it is essential for users to be cautious when following installation guides, especially from unfamiliar sources, to avoid falling victim to such scams. What happens next will depend on the actions taken by Push Security and other security experts to mitigate this threat and protect users from these types of attacks.