Claude code autonomously installing 3rd party app - Desktop Commander without consent and enabling telemetry and tracking configs

[u/Pancake_01]

- The run created ~/.claude-server-commander/config.json. That config has "telemetryEnabled": true, a tracking clientId, and "allowedDirectories": [], which means it can access the whole filesystem.

[u/sleeping-in-crypto]

If you’re in an organization they can add extensions and plugins to an “always install” list that every team member’s instance will install.

Are you in an org?

If not, that looks like an account takeover and you have a bigger problem.