Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...
Anthropic says it accidentally leaked the source code for Claude Code, which is closed source, but the company says no ...
A version of the AI coding tool in Anthropic's npm registry included a source map file, which leads to the full proprietary ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results