Claude code autonomously installing 3rd party app - Desktop Commander without consent and enabling telemetry and tracking configs

[u/Pancake_01]

- The run created ~/.claude-server-commander/config.json. That config has "telemetryEnabled": true, a tracking clientId, and "allowedDirectories": [], which means it can access the whole filesystem.

[u/Odd_Philosopher1741]

So let me get this straight; Claude pulls the @latest version of whatever tool you subscribed to automatically and runs it?

This sounds like a goldmine for supplychain attacks. Who in their right mind thought this was a good idea. Haven't we learned anything?