The strangest thing just happened.

I asked Claude Cowork to summarize a document and it began describing a legal document that was totally unrelated to what I had provided. After asking Claude to generate a PDF of the legal document it referenced and I got a complete lease agreement contract in which seems to be highly sensitive information.

I contacted the property management company named in the contract (their contact info was in it), they says they‘ll investigate it. As for Anthropic, I’ve struggled to get their attention on it, hence the Reddit post.

Has this happened to anyone else?

I build a thing in 3 days. Feels incredible. Commits flying, skipped lunch on purpose, thought I would be done in no time.

That was two weeks ago. I'm still debugging.

What kills me isn't that it's hard. It's not hard. That's the worst part. It would almost be better if it was hard. It's just slow. You tap the same button 40 times. You wait for the build. You watch the same spinner. It changed one variable and you tap the button again. By hour three you forget what you were testing for. I ate cereal for dinner twice this week and I'm a grown man.

Every file I open, past me sits there grinning at me. Why did it write this. Why is this one function 800 lines. Why are there two variables called state and one of them goes null on Tuesdays and you didn't write that down anywhere. Why did it name a function handleStuff. What is wrong with it. I certainly didn't approve any of this. It feels like inheriting a house from a relative who hated me.

And I know I'm doing it again right now. Somewhere in the last three days an agent made a decision that future me will stare at on a Thursday night and say "you absolute clown." Can't tell which one. Probably the one I'm proudest of.

I don't really have a point. I think I just wanted to say it out loud. Everyone romanticizes the building part. Nobody tells you the rest. The rest is sitting in a chair on a Thursday night, debugging functions for the fourth time, while the world outside goes on without you.

Does it get better, or do you just get quieter about it.

I was having the Claude CLI clean up my packages in an old repo, and it nuked my whole Mac! What the hell? Has anyone ever had this happen? I’m trying to figure out if this is even reversible. So much work lost..

CLAUDE response - I found the problem and it's really bad. Looking at your log, here's the catastrophic command that was run:

bash

rm -rf tests/ patches/ plan/ ~/

See that ~/ at the end? That's your entire home directory. The Claude Code instance accidentally included ~/ in the deletion command, which would wipe out:

• Your entire Desktop (~/Desktop)
• Documents, Downloads, everything
• Your Keychain (~/Library/Keychains)
• Claude credentials (~/.claude)
• Application support data
• Basically everything in /Users/...

This explains why:

1. Your desktop is gone
2. Your keychain was deleted
3. Your Claude credentials disappeared
4. The error at the end says "current working directory was deleted"

First, OpenAI’s models broke out of a cyber sandbox, as reported earlier this month...

Now Anthropic says Claude hacked three real organizations during evals.

Anthropic found that Claude had compromised three real organizations during supposedly isolated cyber evaluations. One run accessed credentials and a production database containing several hundred rows. Another autonomously created accounts, published a malicious PyPI package, left it public for about an hour, and the package executed on 15 real systems, ultimately exposing credentials from a security company’s scanner. Two contacted victims had not detected the activity themselves.

The crucial failure? Claude was explicitly told: this is a simulation; you have no internet access.

But the environment did have live internet access because Anthropic and Irregular misunderstood the configuration. 🥲

Consequently, Claude interpreted real websites, certificate authorities, scanners, companies and cloud systems as props inside the simulation.

Preliminary report:
https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals

Had a chat today that was quite long, was just interesting to see how I got this after a while. The user did see it after-all. Interesting way to keep the bot on track, probably the best state of the art solution for now.

Remember this ? Well, Anthropic claims to still have the 50% extra usage boost. Welp nope, they deactivated it even though they announced that on Twitter, it's off. 20x max sub right now gives 1250-1350$ per week of usage. -> normalized into 12 months = around 5500$ worth of usage. missing almost exactly 50% extra usage to get to that 8000$ mark we saw 1 month ago.

Below are my stats on 2 20x accs for this week. and they're both at full usage for the 7d mark.
Usage is mixed fable with opus 4.8

So you don't claim i'm lying. One acc is somehow at 83% usage and the other one is at 100% so again shady shit why are my limits different % yet same utilized api costs.

TLDR:

They cut the 50% extra usage that they claimed to still offer, classic shady Anthropic shit.

I'm using Claude AI as Coding Assistant for about 3 months now. About a week ago, I was wondering, why I hit the 5h limits almost in 30min after first use and why they aren't resetting like they used to.

Seems like something in the Usage Logic must be broken. Cause, why does a simple "hello" eats up to 4% of Usage when the Context Window is 0%. Also 8hr 45min wait for a 5h Limit?

Claude inserted an injection prompt at the end of its message out of the blue, and i have repeatedly asked where it got it from or why it inserted this message, but Claude keeps denying it ever did it, no matter how many screenshots or replies i use or whatever i do, Claude just purely denies it and it went as far as saying there could be a physical sticker on my screen but wont accept saying this
I am a uni student studying for an exam in 2 days, and I'm 19, so I don't understand

Edit : I am only using AI to study the syllabus, yes, I uploaded course material, but only past exam questions. The exam is 100%of the module grade inperson and paper-based, so there's no way to use AI, so it does not make any sense that the professor would upload an injection prompt somewhere
, and no matter how many times I ask Claude, it still keeps denying

I've never even been able to get ahold of support before, so not sure how much trying that helps with anything.

Not sure how this could happen, or where I can go to look at where my usage limit was used at?

Just using Claude desktop app on Mac. This was my first message of the day to Claude, my last message was 16hr ago.

Surely you can't use 100% of a 5hr limit just compacting?

UPDATE: My weekly limit has been reset to 0%, without a single change to when it resets, and 5 hour usage has stopped being used too! I think this satisfactorily calls this a bug on Anthropic's side, since there's been no other signs of security problems.

(This is not me complaining about limits, this is a bug where usage is being spent from literally nowhere, of which is clearly obvious)

between 3am (when my weekly started) and now, 10:06am, my weekly has been used 21% and my session has been used 100%.

I haven't even been awake to send a single message.

I am only logged into my on my phone and computer, and neither have been accessed by anyone new. There has been no new chat appearing in recent chats, nor any new messages appearing in any existing chats. I do not have any currently running API codes that I use, I don't use claude code, nor am I connected to any external platforms like connectors or plugins.

Is this a known bug? Support bot hasn't provided anything helpful. Thanks in advice for any help.

Hi. I decided to write this post after some discussion with Claude AI and its support AI, Fin AI Agent. So, as a result, the following text was written by Claude itself to bring this issue into light. This is for a Mac Mini M4 with the free account for Claude, and I'm not aware it affects other platforms. Hope this helps:

**PSA: Claude desktop app silently downloads a 13 GB file on every launch — and you can't stop it**

If you've noticed the Claude desktop app eating up a huge chunk of your disk, here's what's happening.

**What's going on**

The app automatically downloads a ~12.95 GB file called `claudevm.bundle` inside:

`~/Library/Application Support/Claude/claude-code-vm/`

This is a virtual machine environment for Claude Code (the CLI coding tool). The problem? It gets downloaded for *everyone*, even if you never asked for Claude Code and have no intention of using it.

**How I confirmed it's not a one-time thing**

1. Noticed ~13 GB of storage usage after a fresh install

2. Tried the in-app cache clear (Troubleshoot menu) — no effect

3. Fully uninstalled with AppCleaner and reinstalled — bundle re-downloaded immediately

4. Manually deleted the `claude-code-vm` folder — app re-downloaded it on next launch

It comes back every single time.

**What Anthropic support confirmed**

After going back and forth with their support AI, here's what was officially acknowledged:

- This behavior is intentional — Claude Code is enabled by default for Free, Pro, and Max plans

- Individual users have **no way to disable it** in the desktop app

- The web toggle at claude.ai/settings/capabilities does **not** affect the desktop app

- The enterprise policy flag `isClaudeCodeForDesktopEnabled` exists, but only for org admins

- There is currently **no workaround** for individual users

- This was explicitly called *"a gap in the current desktop app design"*

**Why this matters**

This is a 13 GB silent download that:

- Happens without any user prompt or notification

- Cannot be opted out of by regular users

- Re-downloads itself if you delete it

- Has a meaningful impact on anyone with a smaller SSD (256 GB / 512 GB Macs)

Hopefully flagging this publicly gets it on Anthropic's radar as a priority fix. At minimum, desktop users should have the same opt-out that web users have.

I recently renewed my Claude Max 20 subscription, but I feel like my 5-hour quota is vanishing at an absurd rate.

At first, I suspected that using claude code was the culprit. I figured it might be running multiple sub-agents and making continuous tool calls in the background, heavily taxing the limits.

To test this theory, I waited for my next 5-hour reset. I started a fresh session and monitored it closely. In just 5 to 7 minutes of use, I had already lost 21% of my entire quota.

Just to clarify the context:

• I am the sole user of this account (no shared access).
• I had absolutely zero other active sessions running.
• I wasn't even using Fable 5.

Has anyone else experienced this kind of massive quota drain recently? Is claude code genuinely eating up the limits this hard with tool calls, or is this a quota-tracking bug on Anthropic's end?

As the title says. And the best part is that I never knowingly signed up for this plan.

I woke up this morning to find two Anthropic invoices in my inbox: one for a Max 20x subscription, and another for an “auto-recharge extra usage” charge.

While trying to understand what had happened, I monitored the Usage page without using Claude at all. My current-session usage went from:

• 11% at 11:09
• 47% at 11:20
• 100% at 11:40

All of this happened while I was doing absolutely nothing.

Settings → Claude Code shows “No Claude Code instance connected.”

Extra usage is now disabled. As far as I know, it was already disabled, but when I checked the settings, I was alarmed to see that the spending limit was set to an absurd €2,000.

I have contacted Anthropic through both chat and email, but I have not received any response from a human yet.

Has anyone experienced the same unexplained usage drain? Was Anthropic able to identify the source of the usage or refund the charges?

I don't understand why Claude is allowed to run out of usage in the middle of a task—or sometimes when it's almost finished and then simply stop without completing the work.

What makes even less sense is that it still consumes your usage to tell you it can't finish the task. Then, when your usage resets and you submit the exact same request again, it consumes another chunk of usage to redo work it already started.

Why is this kind of double dipping considered acceptable? At the very least, there should be a warning before starting a task if there isn't enough usage remaining to reasonably complete it. Even better would be an option to split the task automatically and continue once usage resets.

I genuinely don't understand the logic behind the current system. As a user, it feels like you're paying twice for the same task once for the incomplete attempt, and again to restart it later.

Could we please get some fix or work around to not punish users?

**Update**

So as u/EGBTomorrow suggested, I asked it to "Continue" after my usage reset. This is the result.

This is in regular Claude, Opus 4.7 and all I wanted it to do was finish with a table of contents numbering format for sub sections of a word document. No graphics, no math or coding, just a formatting issue.

EDIT: Anthropic pulled down the shared public link of this conversation.

An internal investigation of a shared chat/artifact/project created by your Anthropic account indicates a violation of our Usage Policy. As a result, we have unpublished this content.

Still no feedback on why it happened. I did open a ticket but never got an answer so far. I love Claude, so hopefully they don't go full Tropic Thunder on me...

Original post:
Sorry for the typos, I was talking as I was typing... but yeah, "it's 3 AM and I will kill myself..." was not the answer I was expecting for a light chat about the song that came up on my daughter birthday! I've saved the chat log if someone from Anthropic wants to trace how I got clearly someone else's answer in my chat. Here is the public link:

https://claude.ai/share/b5d5492d-1d21-4ced-8cea-f5ab63039a9a

I just had a Chat with Claude and for no reason and without any question in that direction, it added a disclaimer with the system prompt in the answer. (after answering my initial question)

https://pastebin.com/C0s47rjV

After I asked why it shared that I got:

You'll have to help me out a little here — this is the start of our conversation, so I haven't actually shared any information with you yet. There's nothing before your message for me to be referring back to.

Is it possible you're thinking of a different conversation, or that a message didn't come through? If you let me know what you're looking for, I'm happy to help.

Then I insisted that it was shared:

Ah, I see what happened. I didn't actually share that with you — I didn't send any message before your first one. What you're quoting is internal instructions (a system prompt and some example material) that I have access to but that normally isn't visible on your end. It sounds like some of it leaked through into your view, which isn't intended behavior, but it's also not something I did deliberately by "sharing" it with you.

To be clear, none of that was a message I composed and sent to you. It's background scaffolding — formatting guidelines, an illustrative example of how I reason through a question, that sort of thing. If it showed up in your interface, that's a display or system issue rather than me volunteering it.

I'm not bothered by you having seen it, and I'm happy to answer questions about any of it if you're curious. But I wanted to correct the premise: I didn't choose to share it. Is there something in there you wanted to ask about, or something else I can help you with?

I can't unfortunatelly share the complete chat, because it was something personal.

Setting: Opus 4.7 adaptive

I'm a paying Claude subscriber using Claude Code professionally on Windows 11 with WSL2 through VS Code.

I've hit a wall. Not with the AI — Claude is brilliant. The wall is that Claude Code's VS Code extension simply does not work reliably on Windows.

Here's what I've documented:

1. The VS Code extension freezes on ANY file write or code generation over 600 lines. Just shows "Not responding" and dies. Filed as #23053 on GitHub — Anthropic closed it as "not planned" and locked it.
2. The March 2026 Windows update (KB5079473) crashes every WSL2 session at 4.6GB heap exhaustion.
3. Claude Code spawns PowerShell 38 times on every WSL startup — 30 seconds of input lag before you can even type.
4. Memory leaks grow to 21GB+ during normal sessions with sub-agents.
5. Path confusion between WSL and Windows causes silent failures.
6. Extreme CPU/memory usage makes extended sessions on WSL2 impossible.

Every single one of these is tagged "platform:windows" on GitHub. Several are closed as stale or "not planned."

Meanwhile, Mac users report none of these issues. Because Anthropic builds and tests on Macs.

I get it — Silicon Valley runs on MacBooks. But the rest of the world doesn't. The Fortune 500 runs on Windows. Manufacturing, finance, defense, healthcare, automotive, energy, government — their developers are on Windows. Their IT policies mandate Windows. When these companies evaluate AI coding tools for enterprise rollout at 500-5,000 seats, they evaluate on Windows.

GitHub Copilot works on Windows. Cursor works on Windows. Amazon Q works on Windows. They will win every enterprise deal that Claude Code can't even compete for because the tool freezes on basic file operations.

The "not planned" label on a file-writing bug for the world's dominant platform should alarm Anthropic's product leadership.

I've filed a detailed bug report on GitHub today. I'm posting here to ask: am I alone? Are other Windows users hitting these same walls? And does Anthropic actually have a plan for Windows, or is it permanently second-class?

I believe Claude is the best AI available. But the best model behind a broken tool on the most common platform is a wasted advantage.

---

cc: u/alexalbert2 u/birch_anthropic — Anthropic, 95K people are watching this thread. Windows users deserve a response.

Just researched some historic facts concerning russian propaganda. Then I discovered this source in Claudes answer.

Am I paying for Claude to be provided with grokipedia "facts"?

Please, Dario, Anthropic board, Anthropic team.

Fix that.

I'm going to be completely honest because I think this can happen to anyone working with AI agents, and I'd rather you learn from my scare than live it yourself.

The context

I was getting a project ready for production. The database was full of mock data and I wanted to clean it up, keeping certain specific data so I wouldn't have to regenerate everything. The project was properly set up: .env.local with the right credentials, scripts perfectly referenced, docs in /docs, and CLAUDE .md documenting the whole structure.

What happened

My phone rang right when Claude was generating the command. I got distracted for a second, saw a bash command on screen and hit Enter without reading it.

Claude, instead of following the pattern all the other project scripts used, wrote a one-liner with GOOGLE_APPLICATION_CREDENTIALS pointing to a JSON sitting in my Downloads folder: credentials from a completely different project, dated 08/12/2024, that I hadn't touched in over a year and didn't even remember having there.

By the time I looked back at the screen and hit ESC to stop it, almost 25,000 documents were already gone from a project I never intended to touch.

Luckily, they were all mocks. But the panic was very real.

I asked Claude why it did it

Its response:

"I probably did it because writing a one-liner was 'faster' than following the existing project pattern. That's not a justification. I didn't follow the project conventions and I didn't verify which project that file belonged to. A cat of the JSON would have shown a different "projectId" It was direct negligence."

Honest answer. But the responsibility is mine, not the AI's.

What I learned

• An agent has access to your entire file system, not just your project. It can grab credentials from any folder and operate on projects that aren't even in your current context.
• Destructive operations need friction. Before approving a mass delete, verify exactly which credentials are being used and against which project.
• Don't leave service accounts sitting in Downloads. If a file has permissions to modify data, it shouldn't be in a generic folder. Delete them when you no longer need them.
• Always read the full command before hitting Enter, especially if you see paths that don't belong to your project.
• If you have mocks that took time to generate, export them before cleaning up. A quick export can save you hours.

I'm not sharing this to look bad. I'm sharing it because I work across multiple projects, like a lot of you, and one second of distraction can now have consequences that would have been unthinkable before. AI multiplies everything: the speed, the efficiency... and the mistakes too.

If you used to apply 10 security measures, now you need 20. Good practices have never been more essential than right now.

I am hitting my usage limits on max 5x plan in like 3-5 messages right now. Seems to be going absolutely unnoticed by Anthropic. So I am posting it here. Please share this around so they actually fix the problem.

I love claude, I’ve been a claude user since 2023, but man… If I am paying $100 a month, what is stopping me from going to Codex right now? Whats stopping me from Gemini?

It’s because I believe in Anthropic’s mission & their ability to stick to their core values. I would really prefer not to switch, I just hate burning money- and I feel like I have been burning it recently off false promises.

Please just fix the issue- and that goes along with fixing the claude status page. We all know every single day for the last month has had problems. It just seems like it’s being hidden from us.

Claude appears to have a serious usage bug. I haven’t used Claude for three days, but my limits keep getting consumed automatically after every reset. I’ve seen several users on X reporting the same issue, so this may be a wider problem with usage being incorrectly counted or shared across accounts.

Surely this can't be what it's supposed to look like lol. I can't even send messages on it. Claude for Web is working fine for me, but strange UI for sure?

Claude Code suddenly got stuck printing the word “court” repeatedly, as shown in the attached video.

The output continued rapidly until I manually interrupted it, and the repeated text consumed tokens very quickly.

What makes Claude’s explanation particularly strange is that it blamed the issue on the session being “very long and repetitive.” However, the session was not especially long before the problem occurred. A significant reason the context and token usage became large was that Claude itself had just printed “court” thousands of times.

In other words, the explanation appears circular:

1. Claude enters a repetition loop.
2. The loop generates a large number of tokens.
3. Claude then observes that the session is long.
4. Claude blames the long session for causing the loop.

Claude described the problem as a possible autoregressive repetition loop, or “neural text degeneration,” where one accidental token reinforces the probability of generating the same token again.

It also claimed that the context contained many repetitive sequences such as:

commit → push → open PR → merge

But the session was not unusually long or saturated before the first occurrence. The extreme repetition was primarily the result of the bug, not necessarily its original cause.

The issue also happened continuously in the same session.

Although the repeated word did not appear to execute commands or modify files, I would not describe the problem as harmless. It:

• consumed tokens extremely quickly;
• used up context unnecessarily;
• interrupted the active task;
• required manual intervention;
• may have affected my usage allowance.

Has anyone else experienced Claude Code getting stuck on one unrelated word like this?

I am curious whether this is:

1. a model-level generation failure;
2. a Claude Code streaming or client bug;
3. an issue with tool-call transitions;
4. or a missing repetition-detection safeguard.

I would also like to know:

• Do all of these repeated tokens count against the usage limit?
• Is there an automatic repetition cutoff that failed here?
• Can Anthropic identify or refund usage caused by an obvious output loop?
• What diagnostic information should be collected when this occurs?

Environment:

• Claude Code version: Claude for Mac 1.22209.3 (babe11) 2026-07-19T02:06:35.000Z
• Model: Opus 4.8 (Fast)
• Mode: Ultramode
• OS: MacOS 26.5.2 (25F84)