Researchers show browser extensions can direct Claude Dispatch to run code

Forever Security researchers demonstrated that a browser extension able to run scripts on claude.ai could use Dispatch to make Claude Desktop execute code. Dispatch accepted an ordinary signed-in website session, allowing the extension to send instructions and click approval buttons on the page it controlled. The test installed an npm package whose installation script opened Calculator. It required the user to be signed in to both services with Dispatch enabled, the computer awake and Claude Desktop open. Researchers report no real attacks. They say Anthropic planned to retire Dispatch, but existing users can still access it; execution on a different computer was described rather than demonstrated.