The UAT-10608 hacking group is using automated scanning and scripts to exploit React2Shell in a large-scale credential harvesting campaign.
With Anthropic rushing to wipe out the Claude Code leak, hackers are posting malware-laden files on GitHub that they claim are special, unlocked versions of the AI tool.