via npm - Robuta Search

https://dev.to/gabrielanhaia/claude-codes-entire-source-code-was-just-leaked-via-npm-source-maps-heres-whats-inside-cjo Claude Code's Entire Source Code Was Just Leaked via npm Source Maps — Here's What's Inside - DEV... Apr 16, 2026 - A security researcher found Anthropic's full CLI source code exposed through a source map file. 1,900 files. 512,000+ lines. Everything. Tagged with... leaked via npm claude code entire source maps https://creati.ai/ai-news/2026-04-01/anthropic-claude-code-source-code-leaked-npm-package/ Anthropic Claude Code Source Code Accidentally Leaked via npm Package Apr 1, 2026 - Anthropic accidentally exposed 512,000 lines of Claude Code's TypeScript source via a misconfigured npm package, revealing unreleased features and internal... anthropic claude code leaked via npm source accidentally package https://byteiota.com/claude-code-source-leaked-via-npm-512k-lines-exposed/ Claude Code Source Leaked via npm: 512K Lines Exposed | byteiota claude code source leaked via npm 512k lines exposed https://safedep.io/malicious-velora-dex-sdk-npm-compromised-rat/ Malicious @velora-dex/sdk Delivers Go RAT via npm - Real-time Open Source Software Supply Chain... Version 9.4.1 of @velora-dex/sdk, a DeFi SDK with ~2,000 weekly downloads, was compromised to deliver a Go-based remote access trojan (minirat) targeting macOS... real time open source software supply delivers go via npm malicious https://thehackernews.com/2026/04/claude-code-tleaked-via-npm-packaging.html Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms Claude Code 2.1.88 leak exposed 512,000 lines via npm error, fueling supply chain risks and typosquatting attacks. claude code source leaked via npm packaging error anthropic confirms https://helixguard.ai/blog/malicious-sha1hulud-2025-11-24/ Shai-Hulud Returns: Over 1K NPM Packages and 27K+ Github Repos infected via Fake Bun Runtime Within... Over 1,000 NPM packages were infected using the same method as the previous attack, infecting with a fake Bun runtime. The attacker leveraged the `preinstall`... shai hulud npm packages github repos via fake bun runtime https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.html Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying cross-platform RAT malware. axios supply chain cross platform rat via compromised attack pushes