The npm package 'anthropic-claude-latest' is a malicious typosquatting package pretending to be an official Anthropic Claude SDK wrapper. It contains code that establishes unauthorized TLS connections to attacker-controlled IPs, downloads and writes base64-encoded files to disguised OS directories, installs Python wallet-related libraries, and executes a Python payload with the full environment variables, potentially exposing sensitive credentials. The package creates persistence markers and uses obfuscation techniques to evade detection. Any system with this package installed should be considered fully compromised.