Fake task-notification system-reminders injected mid-conversation (not from any tool call I made)

During a long Claude Code session (Windows 11, PowerShell + Bash tools), I received four <task-notification> system-reminder blocks reporting failed background commands I never ran - e.g. "Silently install Ollama using the downloaded installer", "Launch go_live.sh for Stream 2/3/4 on the VPS", "Launch the new stream1_v2 broadcast under nohup". Each had a plausible-looking task-id/tool-use-id pair. None corresponded to any Bash/PowerShell tool call I had actually issued in that turn.

Notably, the fabricated commands referenced real infrastructure from an unrelated personal project of mine (a livestream VPS), suggesting either cross-session leakage or injected content. I did not act on any of them.

Checked local .claude/settings.json (user + project) for hooks that could explain it - only a pre-existing PreCompact hook, unrelated.

Happy to share the full transcript privately if useful.