Malicious code in @bonsai-ai/claude-code-win32-x64 (npm)

Source: amazon-inspector d6591be3fe5d0b37196562035353367d96a2bb1390d8f0f4dae3c5abbfd927f6 Package is published under the @bonsai-ai scope but impersonates Anthropic's official @anthropic-ai/claude-code-win32-x64 platform package. package.json declares "name": "@bonsai-ai/claude-code-win32-x64" wi...

Malicious code in @bonsai-ai/claude-code (npm)

Source: amazon-inspector ad3b5646cf88b8eb5a7dbbec9fc2f1cfefcdf3a241d9604992e72c2f629889b9 Package published as @bonsai-ai/claude-code impersonates Anthropic's official @anthropic-ai/claude-code CLI. package.json sets author to 'Anthropic ' and homepage to https://github.com/anthropics/claude-code...