Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.
A malicious npm dependency slipped into an AI-assisted crypto trading project has exposed how automated coding tools can be manipulated into importing software that steals credentials, wallet data and ...