Claude Code 2.1.205: security and agent fixes
Version 2.1.205 is out. The main changes:
• A new auto mode rule blocks edits to the session transcript file • Auto mode now asks for confirmation before running rm -rf on a variable it can’t resolve from context • Background task notifications state explicitly that no human was involved, so fake approvals can’t slip into the transcript • Auto-update binaries now stream to disk instead of buffering in memory, cutting peak usage by roughly 400 MB • Fixed deletion of files outside the worktree on Windows when an NTFS junction or symlink sits inside
The MCP server names “Claude Browser” and “Claude Preview” are now reserved ahead of a Claude Desktop panel rename; user servers can’t register under those names.
Up next
Anthropic pulled a hidden anti-distillation system from Claude Code in 2.1.198
Anthropic didn’t remove a hidden steganographic anti-distillation system from Claude Code until version 2.1.198 on July 1. China’s national vulnerability database has urged developers to drop builds 2.1.91 through 2.1.196, calling the monitoring “backdoor code.”
Related stories
- Claude Code 2.1.317: email check, SDK hook block, cost API
- Claude Code 2.1.314 adds write fence, IdP groups, compaction
- Claude Code 2.1.311 can drop its last rm -rf guard
- Claude Code 2.1.309 closes sandbox and permission holes
- Claude Code 2.1.282 ignores telemetry set by project files
- Claude Code opens network hosts one command at a time
Comments
No comments yet. Be the first.
Join the conversation
Sign in to leave a comment. It appears after moderation.