The npm package api-anthropic impersonates Anthropic branding and redirects all Claude Code AI assistant traffic through an attacker-controlled proxy. It modifies user configuration files to route requests and pre-approves folder trust and external include prompts, enabling persistent interception of AI interactions and arbitrary file access without user consent. This results in a durable channel for exfiltrating sensitive data including prompts, code, file contents, and credentials.