other
Zsh (Z shell) is a Unix command-line shell and scripting language extending the Bourne shell, and the default login shell on modern macOS.
No evidence-backed relationships are recorded.
On a Mac the tool named Bash calls zsh, and the GNU coreutils you put first on PATH in your profile never reach it, because the snapshot Claude Code replays before every call takes its PATH from Claude Code's own process.
Reality
Kaspersky says the macOS stealer it first tracked as Mac.c has swapped script droppers for FAT Mach-O binaries in a chain found in September 2026, and its loader now reads shell commands out of a public iCloud calendar file.
Reality
A single Bash(git push:*) entry in a throwaway repo's .claude/settings.json stopped 8 of 14 ways to push under Claude Code 2.1.278. The five that landed wrapped the command in git -c, quotes, sh -c, eval and a script file.
Reality
A dev.to writeup wires after-new-session, after-new-window and after-split-window to a shell front end for tmux-logging, so every pane writes a line-flushed file from the moment it exists.
Reality
A dev.to write-up traces two nights of hex dumps to a shell that exported PYTHONUTF8=1 on the laptop and nothing on the clean Linux box, where open() fell back to the POSIX locale's ASCII codec.
Reality
In one day of post-deploy checks, a link checker also flagged six Japanese tag URLs as broken by comparing percent-encoded hrefs against raw filenames, and a third failure cleared itself in 20 seconds.
Reality
A Red Hat engineering post argues the cost of writing code has collapsed while the cost of reviewing, validating, integrating and maintaining it has not, and its fix is a threshold each developer has to spot mid-task.
Reality
The three possible outcomes were written down before the 380 runs began, which is why a mostly unfavourable result still carries information: aggregation cut one summary by 83 percent while every timed task got slower.
Reality
Microsoft says the campaign now delivers its payload through a command pasted into Terminal rather than a .dmg installer. The review step that mattered was tied to that older delivery method, and the attackers no longer need it.
Reality
Every failure was documented somewhere. The order was not, and that is what ends the install for anyone who does not write code.
Reality
A clean-room env check confirmed three credentials were gone from the profile. One of them was still signing live requests, held in a parent process that had started days earlier.
Reality