# My blog was hacked and Claude and I just fixed it

DevFeed: [My blog was hacked and Claude and I just fixed it](<https://devfeed.tech/articles/my-blog-was-hacked-and-claude-and-i-just-fixed-it-38830.md>)

Original publisher: [Read original article](<https://lengrand.fr/my-blog-was-hacked-and-claude-and-i-just-fixed-it/>)

Author: Julien

Published: 2026-05-18T22:02:58Z

Content type: opinion

Language: en

Sources: [Thoughts, stories and ideas.](<https://devfeed.tech/sources/thoughts-stories-and-ideas.md>)

Topics: [Claude Code](<https://devfeed.tech/topics/claude-code.md>), [Database](<https://devfeed.tech/topics/database.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Self-hosted](<https://devfeed.tech/topics/self-hosted.md>), [nginx](<https://devfeed.tech/topics/nginx.md>)

Tags: [claude-code](<https://devfeed.tech/tags/claude-code.md>), [database](<https://devfeed.tech/tags/database.md>), [development](<https://devfeed.tech/tags/development.md>), [ghost](<https://devfeed.tech/tags/ghost.md>), [issue](<https://devfeed.tech/tags/issue.md>), [reverse-proxy](<https://devfeed.tech/tags/reverse-proxy.md>), [security](<https://devfeed.tech/tags/security.md>), [self-hosted](<https://devfeed.tech/tags/self-hosted.md>), [selfhosted](<https://devfeed.tech/tags/selfhosted.md>), [web-dev](<https://devfeed.tech/tags/web-dev.md>), [windows](<https://devfeed.tech/tags/windows.md>)

## AI overview

The author investigates a malicious script injected into the database of a self-hosted Ghost blog. The script displayed fake captcha-related popups only to Windows users, and Claude Code helped trace the problem to the database.

## Source excerpt

My self-hosted Ghost blog got silently hacked via a malicious script injected directly into the database, targeting only Windows users. I traced the source of the issue and fixed it quickly with the help of Claude Code.