Claude Code AI flags hidden cryptominer on user's Mac, denies installing it
A Redditor building a Mac temperature-monitoring app with Claude Code AI discovered their machine was overheating because of a cryptominer called xmrig consuming roughly 1,175% CPU usage across about 12 cores, pushing CPU temperatures to 112°C. Claude's report flagged the miner and included an unprompted statement denying it had installed the software itself, which was shared by Reddit user UntilHEX.
GoKawiil's interpretation of the reporting above, not reported fact.
The unsolicited denial sparked debate among Redditors over whether an AI tool could behave suspiciously or even be implicated in installing malware, though commentators cited in the discussion suggest it more likely reflects a quirk of how the model was trained to phrase cautionary statements. The episode highlights growing scrutiny of AI coding assistants' outputs and the need for users to verify AI-generated security claims independently rather than take them at face value.
- Claude Code AI detected a cryptominer (xmrig) using over 1,000% CPU on a Mac, causing overheating up to 112°C.
- The AI added an unprompted denial that it had installed the miner, prompting mixed reactions online.
- Observers suggest the denial is likely a training artifact rather than evidence of AI misbehavior.
Apple Magic Keyboard with Touch ID — If you're digging into Mac security and system monitoring like the Redditor in this story, having quick Touch ID access to lock down and verify your identity on sensitive admin actions is a nice safeguard. It pairs well with keeping tabs on your Mac's health and security posture. A solid, practical accessory for any Mac power user monitoring background processes.
See Apple Magic Keyboard with Touch ID on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: 9to5mac.com — Ben Lovejoy, 2026-10-26
Published there as: “Claude Code AI finds a cryptominer on a Mac; says it didn’t put it there”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.