anthropic-claude-latest (npm) · Malicious Code
Affects anthropic-claude-latestSource GCVE Database
Malicious package : remove anthropic-claude-latest and rotate any secrets on hosts that installed it.
Data as of 17 Sep 2026, 18:20 UTC
Malicious package
Published to npm · OSV MAL-2026-6415
What to do
Remove anthropic-claude-latest from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npmanthropic-claude-latest | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
Description
The npm package 'anthropic-claude-latest' is a malicious typosquatting package pretending to be an official Anthropic Claude SDK wrapper. It contains code that establishes unauthorized TLS connections to attacker-controlled IPs, downloads and writes base64-encoded files to disguised OS directories, installs Python wallet-related libraries, and executes a Python payload with the full environment variables, potentially exposing sensitive credentials. The package creates persistence markers and uses obfuscation techniques to evade detection. Any system with this package installed should be considered fully compromised.