Researchcybersecuritysupply-chainnpm-securitynodejs-securitydevsecopsremote-code-executioncredential-theftmalware-analysisdeveloper-securitythreat-intel
Fake “Claude Code” npm Packages – Deep Dive into a Supply Chain Attack
A supply chain attack involving fake Claude Code npm packages, detailing how attackers abuse lifecycle scripts to achieve remote code execution and steal sensitive data.