Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.
Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.
A new report from ReversingLabs identified a new tactic by North Korean hackers: feeding malicious code to the AI systems ...