The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...
A simple human mistake has revealed all 500,000+ lines of code that make up Claude Code. How big a deal is that, really?
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
It is exactly this backdoor that had Google conclude this was a North Korea-sponsored campaign. GTIG said WAVESHAPER.V2 is an ...
Claude Code has been writing nearly 100% of its own code, but the leak of its codebase yesterday didn’t have anything to ...
North Korean hackers compromised the widely used Axios JavaScript library to infiltrate US companies and steal cryptocurrency ...
Anthropic's Claude Code source has leaked via a packaging error, exposing anti-distillation traps, an undercover mode, and scaffolding for an unreleased agent.
A supply chain compromise involving the widely used JavaScript package Axios is now being tied to a North Korea-linked threat ...