Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...
The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...
Anthropic is scrambling to contain the leak, but the AI coding agent is spreading far and wide and being picked apart.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results