Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.
LofyGang resurfaces with LofyStealer disguised as Minecraft hack, exfiltrating IBANs and passwords to 24.152.36[.]241, ...