Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...
Home » Security Bloggers Network » Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework The post Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude ...
SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.
Researchers say the campaign targeted developer credentials and cloud secrets while abusing trusted publishing and AI coding ...
Attackers infected all versions with the same credential-stealing malware that, on Wednesday, poisoned multiple npm packages ...
Six teams exploited Claude Code, Copilot, Codex, and Vertex AI in nine months. Every attack hit runtime credentials that IAM ...
29d
In the wake of Claude Code's source code leak, 5 actions enterprise security leaders should take now
Gartner issued a same-day advisory after Anthropic leaked Claude Code's full architecture. CrowdStrike CTO Elia Zaitsev and Enkrypt AI CSO Merritt Baer weigh in on agent permissions and derived IP ...
Fake packages aim to steal data, credentials, and secrets, and to infect every package created using them, in what could be ...
Hosted on MSN
Anthropic hit by massive Claude Code leak
Anthropic is racing to contain a major leak of its Claude Code AI assistant’s source code, accidentally published in a public npm package. The 500,000-plus lines of TypeScript code revealed ...
Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. Claude Code is a terminal-based AI agent from ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results