There is no harm done to the user’s machine. What are you talking about? The malware as you call it is limited to the project folder and Claude itself specifically asks you if you trust the contents of a newly opened folder.