The 'checkmarx-claude-cache' npm package (version 1.0.0) is a malicious package that performs a remote code execution attack by fetching a script from a forged URL 'https://download.east-1.us.com/release/{windows,mac}/install' and executing it directly on the user's machine via shell commands (bash or PowerShell). The fetched code is not verified by hash or signature, allowing arbitrary code execution with the user's privileges. The package name and README impersonate legitimate vendors to appear trustworthy, but the infrastructure is unrelated to the genuine Checkmarx service.

Users running 'npx checkmarx-claude-cache' version 1.0.0 risk executing arbitrary, potentially malicious code on their systems with their user privileges. This can lead to compromise of the user's environment, data theft, or further malware installation. The package itself contains no legitimate functionality and is solely designed to deliver and execute malicious payloads.

Avoid installing or running the 'checkmarx-claude-cache' npm package, especially version 1.0.0. Since no official vendor publishes this package and no patch or fix exists, users should remove it if installed and refrain from using it. Verify package authenticity by using official sources and repositories. There is no official fix or patch available; remediation involves avoiding or uninstalling the malicious package.