cd /news/ai-agents/claude-saves-an-overheating-mac-from… · home › topics › ai-agents › article
[ARTICLE · art-157903] src=macworld.com ↗ pub= topic=ai-agents verified=true sentiment=· neutral

Claude saves an overheating Mac from a cryptominer it might have put there

An AI developer posting on Reddit as UntilHEX used Anthropic's Claude Code to build a Mac temperature-monitoring app and found a cryptominer in a LaunchAgents folder that was driving temperatures to 112 degrees Celsius and CPU usage to 1175 percent, according to the Reddit post. Claude quarantined the software, though UntilHEX had to manually remove one component because Claude lacked access to the needed part of macOS, and a third-party security check confirmed the Mac returned to normal. It remains unclear how the crypto malware was installed, and Reddit users questioned Claude's innocence in the matter.

read3 min views3 publishedOct 26, 2026

We’ve all heard about how AI is going to change the world as we know it. We’ve also heard about how AI can go rogue and do things that are, well, scary. These early days of AI development are filled with crazy stories, and since the Mac is popular amongs AI developers, you’ll hear a lot about them, especially if you’re a Mac enthusiast.

Take this recent story posted on Reddit by user UntilHEX, an AI developer whose Mac was consistently “running hot.” To identify the issue, they created an app using Claude Code to monitor their Mac’s temperature and identify the issue. During development, Claude ran a check on the accuracy of the Mac’s temperature sensor and discovered something that shouldn’t be there: a “cryptominer that I didn’t put there.”

That cryptominer caused temperature to spike to 112 degrees Celsius (233.6 degrees Farenheit) and CPU usage of 1175 percent. (With modern Macs, CPU usage is measured per core, so usage of over 100 percent is common.) Claude was able to trace the location of the cryptominer to a “LaunchAgents” folder that was put there “before I built anything.”

Despite Reddit users’ suspicions over Claude’s supposed innocence, it’s unclear exactly how the crypto malware was installed on the Mac. Claude offered to “clean it up” by quarantining the software in a folder, though UntilHEX had to manually remove one component because Claude didn’t have access to the part of macOS it needed. UntilHEX then ran a security check was done using a third-party app to make sure it was removed, and their Mac began to run normal again.

This issue is unlikely to affect most users, but if you’re running AI agents, it’s a good idea to stay on track of your Mac’s vitals, which you can track in Activity Monitor. And if your agent has unfettered access to your Mac, it’s probably a good idea to keep a close eye on what it’s doing when you’re not around.

For everyone else, the easiest way to protect yourself from malware is to avoid down software from unfamiliar repositories. Apple has vetted software in the Mac App Store, and it is the safest way to get apps. If you prefer not to patronize the Mac App Store, then buy software directly from the developer and their website. If you insist on using cracked software, you will always risk malware exposure. Never open links in emails or texts you receive from unknown and unexpected sources. If you get a message that looks like it is from an entity that you do business with, check the sender’s email address and inspect the URL carefully. If you see a link or button, you can Control-click it, select Copy Link Address, and then paste it into a text editor to see the actual URL and check it.

Macworld has several guides to help, including a guide on whether or not you need antivirus software, a list of Mac viruses, malware, and trojans, and comparison of Mac security software.

── more in #ai-agents 4 stories · sorted by recency
── more on @claude code 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/claude-saves-an-over…] indexed:0 read:3min 2026-10-26 · —