AI Detection
A developer using Claude Code to help build a temperature monitor app received an unexpected warning from the coding agent. The agent reported that a crypto miner was running on the system, specifically noting that xmrig was utilizing approximately 1175 percent of CPU capacity across roughly 12 cores.
Claude caught a cryptominer on my Mac whilst building me a temperature monitor appfrom r/claude
Malware Discovery
The intensive CPU usage by the mining software ultimately led to its detection. System records indicated the malware had likely been added to the computer startup sequence weeks prior, prompting the user to build a temperature monitoring utility to diagnose the extreme thermal output.
The AI assistant intervened after reviewing raw temperature sensor readings, pointing out that the processor was reaching extreme temperatures of 112 degrees Celsius due to the sustained heavy load from the background mining process.
Remediation
Claude Code detailed how the unauthorized software had established persistence on the system and offered to halt the startup item, stop the miner process, and quarantine the associated files.
The developer subsequently authorized the assistant to handle the cleanup process, requiring only a single manual file deletion due to permission constraints, followed by a confirmatory security scan.
