Reddit user claims Claude backend code leak: he extracted Anthropicм VM and found 371 KB of secret prompts

According to the leaker, he received a full configuration of the product container, which is codenamed wiggle within the company.

Among the materials and technical details found are the following:

• about 40 system action scripts that Claude follows when performing tasks, including those that have not been published in the public domain;
• the removed “embassy” command module contained compiled functions, a full catalog of 59 internal metrics, and incident histories (e.g., kernel crashes and system load) described directly in the code comments;
• The researcher recovered the datastore client symbol table, which exposed RPC paths, token formats, and unannounced feature flags (including DREAMS_API, OPERON, MCP_TUNNELS);
• 371 KB of system instructions for creating charts and widgets were downloaded from an open endpoint that operated without authentication;
• The agent module runs under the root account (uid 0) with almost full privileges, without Seccomp or AppArmor restrictions, and has read and write access to the direct virtual disk /dev/vda.

Risks and developer response

The author of the article emphasized that the only barrier between potentially malicious files and user data is Claude's own evaluation algorithms, since the sandbox environment itself does not impose strict isolation restrictions. This theoretically allows for attacks via prompt injection in downloaded documents or emails.

The author noted that he does not plan to blackmail Anthropic and is ready to transfer all the data found and the research methodology to the company's specialists for a reward.

He also reported that he has already made the code for reproducing the container publicly available on GitHub .

AI agents read CLAUDE.md, but don't always follow instructions. Ukrainian developer explains how to better write documentation for them

On the topic

AI agents read CLAUDE.md, but don't always follow instructions. Ukrainian developer explains how to better write documentation for them

“The most expensive thing is the “tail” you drag behind you”: AI Architect told how not to overpay for long-term sessions in Claude

On the topic

“The most expensive thing is the “tail” you drag behind you”: AI Architect told how not to overpay for long-term sessions in Claude

Attackers have learned to hijack Claude sessions to bypass 2FA. Gmail and Drive may also be at risk

On the topic

Attackers have learned to hijack Claude sessions to bypass 2FA. Gmail and Drive may also be at risk

Read the country's main IT news in our Telegram

On the topic

Read the country's main IT news in our Telegram