Threats affecting pkg:npm/anthropics/anthropic-sdk-typescript

The Claude SDK for TypeScript versions from 0.79.0 up to but not including 0.91.1 had a vulnerability where memory files and directories were created with overly permissive default permissions. This allowed local attackers on shared hosts to read sensitive persisted agent state and, in containerized environments with permissive umasks, to modify these files potentially influencing model behavior. The issue was addressed in version 0.91.1.