As cited
Copy frozen at (site build).
threat intel
Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do
Threat actors exploited a packaging error in Anthropic's Claude Code npm release to distribute Vidar, GhostSocks, and PureLog Stealer malware. Organizations should take immediate steps to identify exposure and implement preventive controls.
Why it matters: Developers and their organizations face active malware distribution through a compromised package dependency; immediate inspection of build systems and supply chain dependencies is necessary to detect potential infections.
- Source published
- First seen by Cybersecurity Tracker